Analysis Summary

CVE-2025-6376 CVSS:7.1

Rockwell Automation Arena Simulation could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write vulnerability. By persuading a victim to open a specially crafted DOE file , an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2025-6377 CVSS:7.1

Rockwell Automation Arena Simulation could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write vulnerability. By persuading a victim to open a specially crafted DOE file , an attacker could exploit this vulnerability to execute arbitrary code on the system.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2025-6376

• CVE-2025-6377

Affected Vendors

Affected Products

• Rockwell Automation Arena 16.20.08

Remediation

Upgrade to the latest version of Arena Simulation, available from the Rockwell Automation Security Advisory.

Rockwell Automation Security Advisory