All news with #arena simulation tag

Tue, November 25, 2025

Rockwell Arena Stack-Based Buffer Overflow Patch Released

#Security Advisory #Patch #RCE #Rockwell Automation #Arena Simulation

🔒 Rockwell Automation has released an update for Arena Simulation to address a stack-based buffer overflow (CWE-121) in the parsing of DOE files that could allow local attackers to execute arbitrary code. The issue, tracked as CVE-2025-11918 (CVSS v4 7.1), affects versions 16.20.10 and earlier and requires opening a malicious DOE file. Rockwell fixed the vulnerability in 16.20.11; users should upgrade or apply recommended mitigations to reduce exposure.