Vulnerability Description
An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Arena | <= 16.20.03 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2024-11156?
CVE-2024-11156 is a vulnerability with a CVSS score of 7.8 (HIGH). An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If ...
How severe is CVE-2024-11156?
CVE-2024-11156 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-11156?
Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Arena.