An “uninitialized variable” code execution vulnerability exists in the
Rockwell Automation Arena®
that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html | Vendor Advisory |
Configurations
History
18 Apr 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Rockwellautomation arena
Rockwellautomation |
|
| CWE | CWE-665 | |
| References | () https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html - Vendor Advisory | |
| CPE | cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:* |
05 Dec 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-05 18:15
Updated : 2025-04-18 18:15
NVD link : CVE-2024-11158
Mitre link : CVE-2024-11158
JSON object : View
Products Affected
rockwellautomation
- arena
CWE
CWE-665
Improper Initialization