Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6c2r-874p-4fv5

Опубликовано: 05 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

EPSS

Процентиль: 14%
0.00045
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 года назад

A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

CVSS3: 7.8
fstec
около 1 года назад

Уязвимость программного средства для моделирования и автоматизации дискретных событий Arena, связанная с возможностью использования памяти после освобождения, позволяющая нарушителюнарушителю выполнить произвольный код

EPSS

Процентиль: 14%
0.00045
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-416