CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-6376

A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 0.8%

CVSS Severity

CVSS v3 Score 7.8

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1729.html

Products affected by CVE-2025-6376

Rockwellautomation » Arena » Version: N/A

cpe:2.3:a:rockwellautomation:arena:-
Rockwellautomation » Arena » Version: 10.00.00

cpe:2.3:a:rockwellautomation:arena:10.00.00
Rockwellautomation » Arena » Version: 11.00.00

cpe:2.3:a:rockwellautomation:arena:11.00.00
Rockwellautomation » Arena » Version: 12.00.00

cpe:2.3:a:rockwellautomation:arena:12.00.00
Rockwellautomation » Arena » Version: 13.00.00

cpe:2.3:a:rockwellautomation:arena:13.00.00
Rockwellautomation » Arena » Version: 13.50.00

cpe:2.3:a:rockwellautomation:arena:13.50.00
Rockwellautomation » Arena » Version: 13.90.00

cpe:2.3:a:rockwellautomation:arena:13.90.00
Rockwellautomation » Arena » Version: 14.00.00

cpe:2.3:a:rockwellautomation:arena:14.00.00
Rockwellautomation » Arena » Version: 14.00.01

cpe:2.3:a:rockwellautomation:arena:14.00.01
Rockwellautomation » Arena » Version: 14.50.00

cpe:2.3:a:rockwellautomation:arena:14.50.00
Rockwellautomation » Arena » Version: 14.70.00

cpe:2.3:a:rockwellautomation:arena:14.70.00
Rockwellautomation » Arena » Version: 15.00.00

cpe:2.3:a:rockwellautomation:arena:15.00.00
Rockwellautomation » Arena » Version: 15.10.00

cpe:2.3:a:rockwellautomation:arena:15.10.00
Rockwellautomation » Arena » Version: 15.10.01

cpe:2.3:a:rockwellautomation:arena:15.10.01
Rockwellautomation » Arena » Version: 16.00.00

cpe:2.3:a:rockwellautomation:arena:16.00.00
Rockwellautomation » Arena » Version: 16.00.01

cpe:2.3:a:rockwellautomation:arena:16.00.01
Rockwellautomation » Arena » Version: 16.10.00

cpe:2.3:a:rockwellautomation:arena:16.10.00
Rockwellautomation » Arena » Version: 16.20.00

cpe:2.3:a:rockwellautomation:arena:16.20.00
Rockwellautomation » Arena » Version: 16.20.01

cpe:2.3:a:rockwellautomation:arena:16.20.01
Rockwellautomation » Arena » Version: 16.20.02

cpe:2.3:a:rockwellautomation:arena:16.20.02
Rockwellautomation » Arena » Version: 16.20.03

cpe:2.3:a:rockwellautomation:arena:16.20.03
Rockwellautomation » Arena » Version: 16.20.04

cpe:2.3:a:rockwellautomation:arena:16.20.04
Rockwellautomation » Arena » Version: 16.20.05

cpe:2.3:a:rockwellautomation:arena:16.20.05
Rockwellautomation » Arena » Version: 16.20.06

cpe:2.3:a:rockwellautomation:arena:16.20.06
Rockwellautomation » Arena » Version: 16.20.07

cpe:2.3:a:rockwellautomation:arena:16.20.07
Rockwellautomation » Arena » Version: 16.20.08

cpe:2.3:a:rockwellautomation:arena:16.20.08
Rockwellautomation » Arena » Version: 2.00.00

cpe:2.3:a:rockwellautomation:arena:2.00.00
Rockwellautomation » Arena » Version: 2.50.00

cpe:2.3:a:rockwellautomation:arena:2.50.00
Rockwellautomation » Arena » Version: 3.00.00

cpe:2.3:a:rockwellautomation:arena:3.00.00
Rockwellautomation » Arena » Version: 8.01.00

cpe:2.3:a:rockwellautomation:arena:8.01.00
Rockwellautomation » Arena » Version: 9.00.00

cpe:2.3:a:rockwellautomation:arena:9.00.00

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-6376

Products

Pricing

Contact Us