VYPR
High severity7.8NVD Advisory· Published Dec 5, 2024· Updated Jun 17, 2026

CVE-2024-11156

CVE-2024-11156

Description

An “out of bounds write” code execution vulnerability exists in the

Rockwell Automation Arena®

that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*range: <=16.20.03
    • (no CPE)
    • (no CPE)range: All versions 16.20.03 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.