CVE-2024-12175: Rockwell Automation Code Execution Vulnerability in Arena

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-19 · updated 2026-06-17
Weakness: CWE-416

Description

Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

Affected products

Rockwell Automation Arena®: before 16.20.07 — fixed in 16.20.07

How to fix

Upgrade to a fixed version: Rockwell Automation Arena® 16.20.07. Check the vendor advisory for mitigations.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html

Get alerted when CVE-2024-12175 or the next vulnerability affects your stack