CVE-2023-29462

Katalog CVE

CVSS 8.8 · High EPSS 0,90%

Kerentanan Out-of-bounds Write pada rockwellautomation arena. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap. potentially resulting in a complete loss of confidentiality, integrity, and availability.

Rincian

Terbit di NVD

9 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-10 advisory pihak ketiga · pemerintah AS
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139391 broken link