Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-8313 2 Rockwell Automation, Rockwellautomation 3 Arena, Arena, Arena Simulation 2026-11-11 7.3 High
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.
CVE-2026-8314 2 Rockwell Automation, Rockwellautomation 3 Arena, Arena, Arena Simulation 2026-11-11 7.3 High
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.
CVE-2026-6071 2 Rockwell Automation, Rockwellautomation 2 Arena, Arena 2026-09-03 N/A
A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a malicious page or open a malicious file.