Rockwell Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability

An attacker could execute arbitrary code on systems running Rockwell Arena Simulation, potentially allowing them to alter process models, corrupt simulation data, or use the system as a pivot point to access connected industrial networks.

Organizations that use Rockwell Arena Simulation for process modeling, training, or analysis in industrial environments should care—particularly those in manufacturing, refining, chemical processing, and utilities where Arena models inform operational decisions or training protocols.

An attacker sends a crafted input or network request to Arena Simulation that triggers an out-of-bounds memory write. This overwrites adjacent memory, allowing code execution. The attacker could then run commands with the privileges of the Arena process to manipulate simulation parameters or access network resources.