Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-12130

Опубликовано: 05 дек. 2024
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena®

that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*
Версия до 16.20.03 (включая)

EPSS

Процентиль: 24%
0.0008
Низкий

7.8 High

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 7.8
github
около 1 года назад

An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

EPSS

Процентиль: 24%
0.0008
Низкий

7.8 High

CVSS3

Дефекты

CWE-125
CWE-125