High severity7.8NVD Advisory· Published Dec 5, 2024· Updated Jun 17, 2026
CVE-2024-11156
CVE-2024-11156
Description
An “out of bounds write” code execution vulnerability exists in the
Rockwell Automation Arena®
that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*range: <=16.20.03
- (no CPE)
- (no CPE)range: All versions 16.20.03 and prior
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.