Rockwell Automation Arena (Update B)

Risk Summary

Successful exploitation of these vulnerabilities could result in execution of arbitrary code.

CVEs (10)

Remediations

• Rockwell Automation recommends users upgrade to V16.20.09 or later.
• Rockwell Automation encourages users of the affected software to apply the following risk mitigations, if possible.
• Do not load untrusted Arena model files.
• Hold the control key down when loading files to help prevent the VBA file stream from loading.
• For information on how to mitigate security risks on industrial automation control systems, Rockwell Automation encourages users to implement their suggested security best practices (login required) to minimize the risk of the vulnerability.
• Stakeholder-Specific Vulnerability Categorization can be used to generate more environment-specific prioritization.
• For more information about these issues, please see the Rockwell Automation security advisory.

Affected Vendors

Affected Products (7)

Affected Sectors

Critical Manufacturing