Описание
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2019-13510
- https://www.us-cert.gov/ics/advisories/icsa-19-213-05
- https://www.zerodayinitiative.com/advisories/ZDI-19-1000
- https://www.zerodayinitiative.com/advisories/ZDI-19-800
- https://www.zerodayinitiative.com/advisories/ZDI-19-801
- https://www.zerodayinitiative.com/advisories/ZDI-19-994
- https://www.zerodayinitiative.com/advisories/ZDI-19-998
- https://www.zerodayinitiative.com/advisories/ZDI-19-999
- https://www.zerodayinitiative.com/advisories/ZDI-20-926
- https://www.zerodayinitiative.com/advisories/ZDI-20-927
- https://www.zerodayinitiative.com/advisories/ZDI-20-928
- https://www.zerodayinitiative.com/advisories/ZDI-20-929
- https://www.zerodayinitiative.com/advisories/ZDI-20-930
- https://www.zerodayinitiative.com/advisories/ZDI-20-931
Связанные уязвимости
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.
Уязвимость программного обеспечения для дискретного моделирования событий и автоматизации Rockwell Automation Arena, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код