Rockwell Local Code Execution Vulnerabilities in Arena®

An attacker with local access to a workstation running Rockwell Arena could execute arbitrary code with the same privileges as the application, potentially compromising engineering data, process models, or control logic.

Engineering and IT staff managing Rockwell Arena simulation and modeling software. This affects utilities and manufacturers that use Arena for discrete event simulation, process modeling, and optimization of industrial workflows.

An attacker must be physically present or have local logon access to a workstation running Rockwell Arena. They could then exploit the local code execution vulnerability to run arbitrary commands or load malicious code with Arena's application privileges, compromising the integrity of plant simulation and engineering files.