← CVE Intelligence

CVE-2024-6068

Input Validation Vulnerability exists in Arena® Input Analyzer PUBLISHED

Description (CNA)

A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can exploit this issue to disclose information and to execute arbitrary code. To exploit this vulnerability a legitimate user must open a malicious DFT file.

Affected (CNA)

Vendor / productVersions
Rockwell Automation / Arena Input Analyzeraffected <=16.20.03

CWE

CWE-1284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.