CVE-2024-11155

Summary

CVE-2024-11155 is a critical use-after-free vulnerability affecting Rockwell Automation's Arena® software. This issue allows a threat actor to generate a malicious DOE file, which can force the software to utilize a previously released resource. If successfully exploited, the attacker could execute arbitrary code within the affected system. To exploit the vulnerability, a legitimate user must execute the specially crafted file provided by the attacker.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.