CVE-2025-11918 — Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability

CVE-2025-11918

Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability PUBLISHED

Description (CNA)

Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of Arena®. Exploiting the vulnerability requires opening a malicious DOE file.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / Arena® Simulation	affected Version 16.20.10 and prior

CWE

CWE-121

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1763.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.