No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely.
Credit: Michael Heinzl
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-21912 | CWE-787 Out-of-bounds Write | 7.8 High |
An arbitrary code execution vulnerability could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor. Mitigation: Rockwell Automation recommends upgrading the affected product software to 16.20.03. ↗ Mitigation: Rockwell Automation encourages users of the affected software to apply the risk mitigations, if possible: Mitigation: Do not open untrusted files from unknown sources. Affected, fixed & timelineAffected:
Mitigation: For information on how to mitigate security risks on industrial automation control systems, we encourage customers to implement our suggested security best practices to minimize the risk of the vulnerability.Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization. Mitigation: For additional information, refer to Rockwell Automation's security advisory. |
| CVE-2024-21913 | CWE-122 Heap-based Buffer Overflow | 7.8 High |
A heap-based memory buffer overflow vulnerability could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which trigger an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor. Mitigation: Rockwell Automation recommends upgrading the affected product software to 16.20.03. ↗ Mitigation: Rockwell Automation encourages users of the affected software to apply the risk mitigations, if possible: Mitigation: Do not open untrusted files from unknown sources. Affected, fixed & timelineAffected:
Mitigation: For information on how to mitigate security risks on industrial automation control systems, we encourage customers to implement our suggested security best practices to minimize the risk of the vulnerability.Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization. Mitigation: For additional information, refer to Rockwell Automation's security advisory. |
| CVE-2024-21918 | CWE-416 Use After Free | 7.8 High |
A memory buffer vulnerability could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor. Mitigation: Rockwell Automation recommends upgrading the affected product software to 16.20.03. ↗ Mitigation: Rockwell Automation encourages users of the affected software to apply the risk mitigations, if possible: Mitigation: Do not open untrusted files from unknown sources. Affected, fixed & timelineAffected:
Mitigation: For information on how to mitigate security risks on industrial automation control systems, we encourage customers to implement our suggested security best practices to minimize the risk of the vulnerability.Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization. Mitigation: For additional information, refer to Rockwell Automation's security advisory. |
| CVE-2024-21919 | CWE-824 Access of Uninitialized Pointer | 7.8 High |
An uninitialized pointer could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor. Mitigation: Rockwell Automation recommends upgrading the affected product software to 16.20.03. ↗ Mitigation: Rockwell Automation encourages users of the affected software to apply the risk mitigations, if possible: Mitigation: Do not open untrusted files from unknown sources. Affected, fixed & timelineAffected:
Mitigation: For information on how to mitigate security risks on industrial automation control systems, we encourage customers to implement our suggested security best practices to minimize the risk of the vulnerability.Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization. Mitigation: For additional information, refer to Rockwell Automation's security advisory. |
| CVE-2024-2929 | CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.8 High |
A memory corruption vulnerability could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor. Mitigation: Rockwell Automation recommends upgrading the affected product software to 16.20.03. ↗ Mitigation: Rockwell Automation encourages users of the affected software to apply the risk mitigations, if possible: Mitigation: Do not open untrusted files from unknown sources. Affected, fixed & timelineAffected:
Mitigation: For information on how to mitigate security risks on industrial automation control systems, we encourage customers to implement our suggested security best practices to minimize the risk of the vulnerability.Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization. Mitigation: For additional information, refer to Rockwell Automation's security advisory. |
| CVE-2024-21920 | CWE-125 Out-of-bounds Read | 4.4 Medium |
A memory buffer vulnerability might let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor. Mitigation: Rockwell Automation recommends upgrading the affected product software to 16.20.03. ↗ Mitigation: Rockwell Automation encourages users of the affected software to apply the risk mitigations, if possible: Mitigation: Do not open untrusted files from unknown sources. Affected, fixed & timelineAffected:
Mitigation: For information on how to mitigate security risks on industrial automation control systems, we encourage customers to implement our suggested security best practices to minimize the risk of the vulnerability.Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization. Mitigation: For additional information, refer to Rockwell Automation's security advisory. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-21912 | 7.8 High | Rockwell Automation Arena Simulation An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the softw… |
| CVE-2024-21913 | 7.8 High | Rockwell Automation Arena Simulation A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to inser… |
| CVE-2024-21918 | 7.8 High | Rockwell Automation Arena Simulation A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code … |
| CVE-2024-21919 | 7.8 High | Rockwell Automation Arena Simulation An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to th… |
| CVE-2024-2929 | 7.8 High | Rockwell Automation Arena Simulation A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized c… |
| CVE-2024-21920 | 4.4 Medium | Rockwell Automation Arena Simulation A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundar… |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.