Remote Code Execution Vulnerability in Rockwell Automation Arena Simulation

CVE-2025-6377

What is CVE-2025-6377?

A remote code execution vulnerability has been identified in Rockwell Automation's Arena Simulation, allowing a crafted DOE file to force the software to write beyond the boundaries of an allocated object. This exploitation requires user interaction, specifically the opening of a malicious file within the application. If successfully exploited, it enables attackers to execute arbitrary code on the compromised system. For maximum impact, the software must be executed with administrator privileges.

References