No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely.
Credit: Michael Heinzl
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2025-7025 | CWE-125 Out-of-bounds Read | 7.8 High |
A local code execution vulnerability exists in Rockwell Automation Arena due to a threat actor's ability to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited, a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file. Mitigation: Rockwell Automation recommends users updating to arena Version 16.20.10 or later. ↗ Mitigation: For more information about these issues, reference the Rockwell Automation security advisory. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-7032 | CWE-121 Stack-based Buffer Overflow | 7.8 High |
A local code execution vulnerability exists in Rockwell Automation Arena due to a stack-based memory buffer overflow. The flaw is a result of improper validation of user-supplied data. If exploited, a threat actor can execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file. Mitigation: Rockwell Automation recommends users updating to arena Version 16.20.10 or later. ↗ Mitigation: For more information about these issues, reference the Rockwell Automation security advisory. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-7033 | CWE-122 Heap-based Buffer Overflow | 7.8 High |
A local code execution vulnerability exists in Rockwell Automation Arena due to a heap-based buffer overflow. The flaw is a result of improper validation of user-supplied data. If exploited, a threat actor can execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file. Mitigation: Rockwell Automation recommends users updating to arena Version 16.20.10 or later. ↗ Mitigation: For more information about these issues, reference the Rockwell Automation security advisory. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2025-7025 | 8.4 High | Rockwell Automation Arena® Simulation A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of … |
| CVE-2025-7032 | 8.4 High | Rockwell Automation Arena® Simulation A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of … |
| CVE-2025-7033 | 8.4 High | Rockwell Automation Arena® Simulation A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of … |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.