What’s Vulnerable › Vulnerabilities

CVE-2024-6068: Input Validation Vulnerability exists in Arena® Input Analyzer

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-14 · updated 2026-06-17
• Weakness: CWE-1284

Description

A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can exploit this issue to disclose information and to execute arbitrary code. To exploit this vulnerability a legitimate user must open a malicious DFT file.

Affected products

• Rcokwellautomation Arena Input Analyzer: through 16.20.03

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD17011.html

Get alerted when CVE-2024-6068 or the next vulnerability affects your stack