https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:48:56 +0000 https://cve.radiocsirt.org/vuln/cve-2023-27854 <p><strong>Affected:</strong> Rockwell Automation Arena Simulation</p> <p>An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow.  The threat-actor could then execute malicious code on the system affecting the confidentiality, integrity, and availability of the product.  The user would need to open a malicious file provided to them by the attacker for the code to execute.</p> <p><strong>Affected:</strong> Rockwell Automation Arena Simulation</p> <p>An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow.  The threat-actor could then execute malicious code on the system affecting the confidentiality, integrity, and availability of the product.  The user would need to open a malicious file provided to them by the attacker for the code to execute.</p> https://cve.radiocsirt.org/vuln/cve-2023-27854 https://cve.radiocsirt.org/vuln/icsa-23-299-04 <p>Version 16.20 of Rockwell Automation&#39;s Arena software contains an out-of-bounds read vulnerability when certain malformed files are processed. An attacker with local access could utilize this to potentially leak memory or achieve arbitrary code execution. Version 16.20 of Rockwell Automation&#39;s Arena software contains an uninitialized pointer when certain malformed files are processed. A local attacker who has properly prepared a malformed file may be able to point to a predetermined location in memory and execute arbitrary code.</p> <p>Version 16.20 of Rockwell Automation&#39;s Arena software contains an out-of-bounds read vulnerability when certain malformed files are processed. An attacker with local access could utilize this to potentially leak memory or achieve arbitrary code execution. Version 16.20 of Rockwell Automation&#39;s Arena software contains an uninitialized pointer when certain malformed files are processed. A local attacker who has properly prepared a malformed file may be able to point to a predetermined location in memory and execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/icsa-23-299-04