ID
VAR-202507-0649
CVE
CVE-2025-6376
TITLE
Rockwell Automation of Arena Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P. Rockwell Automation of Arena Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process
Trust: 2.79
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | rockwellautomation | model: | arena | scope: | lt | version: | 16.20.09 | Trust: 1.0 |
| vendor: | rockwell automation | model: | arena | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | rockwell automation | model: | arena | scope: | eq | version: | 16.20.09 | Trust: 0.8 |
| vendor: | rockwell automation | model: | arena | scope: | - | version: | - | Trust: 0.8 |
| vendor: | rockwell automation | model: | arena simulation | scope: | - | version: | - | Trust: 0.7 |
| vendor: | rockwell | model: | automation arena | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-20 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | Inappropriate input confirmation (CWE-20) [ others ] | Trust: 0.8 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | Rockwell Automation has issued an update to correct this vulnerability. | url: | https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1729.html | Trust: 0.7 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-6376 | Trust: 3.9 |
| db: | JVNDB | id: | JVNDB-2025-008853 | Trust: 0.8 |
| db: | ZDI_CAN | id: | ZDI-CAN-26556 | Trust: 0.7 |
| db: | ZDI | id: | ZDI-25-836 | Trust: 0.7 |
| db: | CNVD | id: | CNVD-2025-19255 | Trust: 0.6 |
REFERENCES
| url: | https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.sd1729.html | Trust: 3.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-6376 | Trust: 0.8 |
CREDITS
Simon (@esj4y) Janz
Trust: 0.7
SOURCES
| db: | ZDI | id: | ZDI-25-836 |
| db: | CNVD | id: | CNVD-2025-19255 |
| db: | JVNDB | id: | JVNDB-2025-008853 |
| db: | NVD | id: | CVE-2025-6376 |
LAST UPDATE DATE
2025-10-16T23:21:30.371000+00:00
SOURCES UPDATE DATE
| db: | ZDI | id: | ZDI-25-836 | date: | 2025-08-13T00:00:00 |
| db: | CNVD | id: | CNVD-2025-19255 | date: | 2025-08-22T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-008853 | date: | 2025-07-15T01:29:00 |
| db: | NVD | id: | CVE-2025-6376 | date: | 2025-07-11T18:35:53.330 |
SOURCES RELEASE DATE
| db: | ZDI | id: | ZDI-25-836 | date: | 2025-08-13T00:00:00 |
| db: | CNVD | id: | CNVD-2025-19255 | date: | 2025-08-22T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-008853 | date: | 2025-07-15T00:00:00 |
| db: | NVD | id: | CVE-2025-6376 | date: | 2025-07-09T21:15:28.423 |