CVE-2019-13510

ALTO 7.8CVE-2019-13510 · Published 15/08/2019 · updated 17/06/2026

In breve

CVE-2019-13510 è una vulnerabilità ALTO (CVSS 7.8) che riguarda arena (rockwellautomation).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 12.0%, superiore al 96.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
arena rockwellautomation	`≤ 16.00.00`	No fix yet

Description

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.

References

us-cert.gov/ics/advisories/icsa-19-213-05 · Mitigation
zerodayinitiative.com/advisories/ZDI-19-1000
zerodayinitiative.com/advisories/ZDI-19-800
zerodayinitiative.com/advisories/ZDI-19-801
zerodayinitiative.com/advisories/ZDI-19-994
zerodayinitiative.com/advisories/ZDI-19-998
zerodayinitiative.com/advisories/ZDI-19-999
zerodayinitiative.com/advisories/ZDI-20-926
zerodayinitiative.com/advisories/ZDI-20-927
zerodayinitiative.com/advisories/ZDI-20-928
zerodayinitiative.com/advisories/ZDI-20-929
zerodayinitiative.com/advisories/ZDI-20-930
zerodayinitiative.com/advisories/ZDI-20-931

Altre vulnerabilità di arena

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free