CVE-2025-11918: Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-14 · updated 2026-10-07
Weakness: CWE-121

Description

Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of Arena®. Exploiting the vulnerability requires opening a malicious DOE file.

Affected products

Rockwell Automation Arena®: before 16.20.11 — fixed in 16.20.11

How to fix

Upgrade to a fixed version: Rockwell Automation Arena® 16.20.11. Check the vendor advisory for mitigations.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1763.html

Get alerted when CVE-2025-11918 or the next vulnerability affects your stack