CVE-2019-13510

HIGH 7.8CVE-2019-13510 · Published 15/08/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
arena rockwellautomation	`≤ 16.00.00`	No fix yet

Description

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.

References

us-cert.gov/ics/advisories/icsa-19-213-05 · Mitigation
zerodayinitiative.com/advisories/ZDI-19-1000
zerodayinitiative.com/advisories/ZDI-19-800
zerodayinitiative.com/advisories/ZDI-19-801
zerodayinitiative.com/advisories/ZDI-19-994
zerodayinitiative.com/advisories/ZDI-19-998
zerodayinitiative.com/advisories/ZDI-19-999
zerodayinitiative.com/advisories/ZDI-20-926
zerodayinitiative.com/advisories/ZDI-20-927
zerodayinitiative.com/advisories/ZDI-20-928
zerodayinitiative.com/advisories/ZDI-20-929
zerodayinitiative.com/advisories/ZDI-20-930
zerodayinitiative.com/advisories/ZDI-20-931

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free