CVE-2025-6376

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-6376
A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1729.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*
History

11 Jul 2025, 18:35

Type Values Removed Values Added
CPE cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*
CWE CWE-787
First Time Rockwellautomation
Rockwellautomation arena
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1729.html - () https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1729.html - Vendor Advisory

10 Jul 2025, 13:17

Type Values Removed Values Added
Summary
  • (es) Existe un problema de seguridad de ejecución remota de código en Rockwell Automation Arena®. Un archivo DOE manipulado puede obligar a Arena Simulation a escribir más allá de los límites de un objeto asignado. Su explotación requiere la interacción del usuario, como abrir un archivo malicioso dentro del software. Si se explota, un atacante podría ejecutar código arbitrario en el sistema objetivo. El software debe ejecutarse bajo el contexto del administrador para causar un impacto aún mayor. Esto se refleja en la puntuación CVSS de Rockwell, como AT:P.

09 Jul 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-09 21:15

Updated : 2025-07-11 18:35

NVD link : CVE-2025-6376

Mitre link : CVE-2025-6376

CVE.ORG link : CVE-2025-6376

JSON object : View

Products Affected

rockwellautomation

  • arena
CWE
CWE-20

Improper Input Validation

CWE-787

Out-of-bounds Write