Rockwell Arena® Simulation Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow in Rockwell Arena Simulation could allow an attacker to crash the simulation application or execute arbitrary code on the engineering workstation running the software, potentially disrupting planning and design activities for your control systems.

Engineering teams who use Rockwell Arena Simulation for modeling and planning automation systems should be aware of this vulnerability. This affects design and simulation work rather than running production systems, but compromised simulation environments could introduce flawed logic into deployed control systems.

An attacker could craft a malicious input file (such as a scenario file or model data) that triggers the buffer overflow when processed by Arena Simulation. If the attacker can deliver this file to an engineer's workstation or trick an engineer into opening it, the overflow could crash the application or allow code execution with the workstation user's privileges.