Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-11156

Опубликовано: 05 дек. 2024
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

An “out of bounds write” code execution vulnerability exists in the

Rockwell Automation Arena®

that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*
Версия до 16.20.03 (включая)

EPSS

Процентиль: 28%
0.001
Низкий

7.8 High

CVSS3

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 7.8
github
около 1 года назад

An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

EPSS

Процентиль: 28%
0.001
Низкий

7.8 High

CVSS3

Дефекты

CWE-787
CWE-787