Known vulnerabilities in Arena
Vendor:
Rockwell Automation
Software:
Arena
Software CPE:
cpe:2.3:a:rockwell_automation:arena:*:*:*:*:*:*:*:*
Website:
https://www.rockwellautomation.com/
Total vulnerabilities:
24
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114403 - Out-of-bounds write CVE-2025-6377 |
CWE-787 | High | 16.20.09 | 25.08.2025 |
SB2025082530 |
||
| #VU114402 - Out-of-bounds write CVE-2025-6376 |
CWE-787 | High | 16.20.09 | 25.08.2025 |
SB2025082530 |
||
| #VU113773 - Heap-based Buffer Overflow CVE-2025-7033 |
CWE-122 | High | 16.20.10 | 08.08.2025 |
SB2025080822 |
||
| #VU113772 - Stack-based buffer overflow CVE-2025-7032 |
CWE-121 | High | 16.20.10 | 08.08.2025 |
SB2025080822 |
||
| #VU113771 - Out-of-bounds read CVE-2025-7025 |
CWE-125 | High | 16.20.10 | 08.08.2025 |
SB2025080822 |
||
| #VU107424 - Stack-based buffer overflow CVE-2025-3289 |
CWE-121 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107423 - Out-of-bounds read CVE-2025-3288 |
CWE-125 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107422 - Out-of-bounds read CVE-2025-3287 |
CWE-125 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107421 - Out-of-bounds read CVE-2025-3286 |
CWE-125 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107419 - Out-of-bounds read CVE-2025-3285 |
CWE-125 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107417 - Out-of-bounds write CVE-2025-2829 |
CWE-787 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107415 - Out-of-bounds write CVE-2025-2293 |
CWE-787 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107414 - Out-of-bounds write CVE-2025-2288 |
CWE-787 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107412 - Use of Uninitialized Variable CVE-2025-2287 |
CWE-457 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107410 - Use of Uninitialized Variable CVE-2025-2286 |
CWE-457 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU107409 - Use of Uninitialized Variable CVE-2025-2285 |
CWE-457 | High | 16.20.09 | 14.04.2025 |
SB2025041437 |
||
| #VU82522 - Access of Uninitialized Pointer CVE-2023-27858 |
CWE-824 | High | 16.20.01 | 27.10.2023 |
SB2023102704 |
||
| #VU82521 - Out-of-bounds read CVE-2023-27854 |
CWE-125 | High | 16.20.01 | 27.10.2023 |
SB2023102704 |
||
| #VU21331 - Type confusion CVE-2019-13519 |
CWE-843 | High | 16.00.01 | 25.09.2019 |
SB2019080109 SB2019121201 SB2020012916 and 2 more |
||
| #VU21330 - Access of Uninitialized Pointer CVE-2019-13527 |
CWE-824 | High | 16.00.01 | 25.09.2019 |
SB2019080109 SB2019121201 SB2019121824 and 7 more |
Showing elements 1 - 20 out of 24