Local Code Execution Vulnerability in Rockwell Automation Arena

CVE-2025-3288

What is CVE-2025-3288?

A local code execution vulnerability in Rockwell Automation's Arena arises from inadequate validation of user-inputted data. This flaw allows a threat actor with legitimate user access to open a malicious DOE file, resulting in the potential disclosure of sensitive information and execution of arbitrary code within the system. Proper security measures and validation processes are crucial to mitigate the risks associated with this vulnerability.

References