CVE-2023-29461
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published May 9, 2023
Updated: Dec 17, 2024
CWE ID 125
Summary
CVE-2023-29461 is a critical arbitrary code execution vulnerability affecting Rockwell Automation's Arena Simulation software. This issue stems from a memory buffer overflow in the heap, which a malicious user can exploit to commit unauthorized code. The consequences of this vulnerability can be severe, potentially leading to a complete loss of confidentiality, integrity, and availability. Users are strongly advised to apply the necessary patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Rockwell Automation