CVE-2024-21918
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 26, 2024
Updated: Dec 17, 2024
CWE ID 416
Summary
CVE-2024-21918 is a memory buffer vulnerability in Rockwell Automation Arena Simulation software. By corrupting the memory and triggering an access violation, a malicious user can potentially insert unauthorized code into the software. Once inside, the threat actor can execute harmful code on the system, compromising the confidentiality, integrity, and availability of the product. The user would unwittingly need to open a malicious file to trigger this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Rockwell Automation