Vulnerability Details CVE-2019-13527
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.7%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
Products affected by CVE-2019-13527
-
cpe:2.3:a:rockwellautomation:arena:-
-
cpe:2.3:a:rockwellautomation:arena:10.00.00
-
cpe:2.3:a:rockwellautomation:arena:11.00.00
-
cpe:2.3:a:rockwellautomation:arena:12.00.00
-
cpe:2.3:a:rockwellautomation:arena:13.00.00
-
cpe:2.3:a:rockwellautomation:arena:13.50.00
-
cpe:2.3:a:rockwellautomation:arena:13.90.00
-
cpe:2.3:a:rockwellautomation:arena:14.00.00
-
cpe:2.3:a:rockwellautomation:arena:14.00.01
-
cpe:2.3:a:rockwellautomation:arena:14.50.00
-
cpe:2.3:a:rockwellautomation:arena:14.70.00
-
cpe:2.3:a:rockwellautomation:arena:15.00.00
-
cpe:2.3:a:rockwellautomation:arena:15.10.00
-
cpe:2.3:a:rockwellautomation:arena:15.10.01
-
cpe:2.3:a:rockwellautomation:arena:16.00.00
-
cpe:2.3:a:rockwellautomation:arena:2.00.00
-
cpe:2.3:a:rockwellautomation:arena:2.50.00
-
cpe:2.3:a:rockwellautomation:arena:3.00.00
-
cpe:2.3:a:rockwellautomation:arena:8.01.00
-
cpe:2.3:a:rockwellautomation:arena:9.00.00