Rockwell Arena® Simulation Multiple Memory Corruption Vulnerabilities

Memory corruption vulnerabilities in Arena Simulation could allow an attacker to crash the application or execute arbitrary code on an engineering workstation, disrupting process simulation and plant design workflows.

Engineering teams and process simulation specialists who use Rockwell Arena Simulation for plant design, optimization, and operator training. This affects workstations used for pre-deployment process validation and simulation, not live production systems, but could delay critical plant engineering projects.

An attacker would need to supply a malformed input or file to Arena Simulation running on an engineering workstation. The memory corruption could be triggered through file import, network communication, or other input mechanisms, potentially leading to denial of service or code execution on the affected workstation.