{“lastseen”:””,”description”:”Rockwell Automation Arena\u00ae suffers from a\\nstack-based buffer overflow vulnerability. The specific flaw exists within the\\nparsing of DOE files. Local attackers are able to exploit this issue to\\npotentially execute arbitrary code on affected installations of Arena\u00ae. Exploiting\\nthe vulnerability requires opening a malicious DOE file.”,”published”:”2025-11-14T13:28:39.453Z”,”modified”:”2025-11-14T15:44:16.712Z”,”type”:”cve”,”title”:”Rockwell Automation Arena\u00ae Simulation Stack-Based Buffer Overflow Vulnerability”,”source”:”Rockwell”,”references”:”https:\/\/www.rockwellautomation.com\/en-us\/trust-center\/security-advisories\/advisory.SD1763.html”,”id”:”CVE-2025-11918″,”bulletinFamily”:””,”cwe”:[“CWE-121″],”cvelist”:null,”sourceData”:”Rockwell Automation Arena\u00ae Simulation Version 16.20.10 and prior”,”sourceHref”:””,”cvss”:{“score”:7.1,”severity”:”HIGH”,”vector”:”CVSS:4.0\/AV:L\/AC:H\/AT:N\/PR:N\/UI:A\/VC:H\/VI:H\/VA:H\/SC:N\/SI:N\/SA:N”,”version”:”4.0″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Arena\u00ae Simulation”,”version”:”Version 16.20.10 and prior”,”vendor”:”Rockwell Automation”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”Rockwell Automation Arena\u00ae suffers from a\\nstack-based buffer overflow vulnerability. The specific flaw exists within the\\nparsing of DOE files. Local attackers are able to exploit this…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,50,12,15,13,7,11,5],"class_list":["post-26328","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-71","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n