What’s Vulnerable › Vulnerabilities
CVE-2025-6376: Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-09 · updated 2026-06-17
- Weakness: CWE-20
Description
A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.
Affected products
- Rockwell Automation Arena®: before 16.20.09 — fixed in 16.20.09
How to fix
Upgrade to a fixed version: Rockwell Automation Arena® 16.20.09. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-6376 or the next vulnerability affects your stack