CVE-2019-13510

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

12.04%

Published

Aug 15, 2019

Modified

Dec 17, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.

Weaknesses (CWE)

CWE-416CWE-416

Affected Products (1)

rockwellautomation · arenavulnerable

References (20)

https://www.us-cert.gov/ics/advisories/icsa-19-213-05

MitigationThird Party AdvisoryUS Government Resource

https://www.zerodayinitiative.com/advisories/ZDI-19-1000/

https://www.zerodayinitiative.com/advisories/ZDI-19-800/

https://www.zerodayinitiative.com/advisories/ZDI-19-801/

https://www.zerodayinitiative.com/advisories/ZDI-19-994/

https://www.zerodayinitiative.com/advisories/ZDI-19-998/

https://www.zerodayinitiative.com/advisories/ZDI-19-999/

https://www.zerodayinitiative.com/advisories/ZDI-20-926/

https://www.zerodayinitiative.com/advisories/ZDI-20-927/

https://www.zerodayinitiative.com/advisories/ZDI-20-928/

https://www.zerodayinitiative.com/advisories/ZDI-20-929/

https://www.zerodayinitiative.com/advisories/ZDI-20-930/

https://www.zerodayinitiative.com/advisories/ZDI-20-931/