CVE-2019-13510

Description (CNA)

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.

Affected (CNA)

CWE

CWE-416

References

• https://www.us-cert.gov/ics/advisories/icsa-19-213-05
• https://www.zerodayinitiative.com/advisories/ZDI-19-800/
• https://www.zerodayinitiative.com/advisories/ZDI-19-801/
• https://www.zerodayinitiative.com/advisories/ZDI-19-994/
• https://www.zerodayinitiative.com/advisories/ZDI-19-999/
• https://www.zerodayinitiative.com/advisories/ZDI-19-998/
• https://www.zerodayinitiative.com/advisories/ZDI-19-1000/
• https://www.zerodayinitiative.com/advisories/ZDI-20-927/
• https://www.zerodayinitiative.com/advisories/ZDI-20-931/
• https://www.zerodayinitiative.com/advisories/ZDI-20-926/
• https://www.zerodayinitiative.com/advisories/ZDI-20-929/
• https://www.zerodayinitiative.com/advisories/ZDI-20-928/
• https://www.zerodayinitiative.com/advisories/ZDI-20-930/

ADP enrichment