Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-8085

Опубликовано: 14 июл. 2026
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*
Версия до 17.00.01 (исключая)

EPSS

Процентиль: 8%
0.0018
Низкий

7.3 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.3
github
18 дней назад

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.

EPSS

Процентиль: 8%
0.0018
Низкий

7.3 High

CVSS3

Дефекты

CWE-787