Rockwell Automation Arena Simulation Software (Update B)

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a current Arena session to fault or enter a denial-of-service (DoS) state, allowing the attacker to run arbitrary code.

CVEs (5)

Remediations

• Rockwell Automation has released Version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
• Do not open untrusted .doe files with Arena Simulation Software.
• Ensure all software is run as a User and not as an Administrator to minimize the impact of malicious code on the infected system.
• Use trusted software, software patches, anti-virus/anti-malware programs, and interact only with trusted websites and attachments
• For more information please see the Rockwell Automation security advisory (login required).

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing