Threat Investigation
Request a demo

CVE-2025-7032

High

Description

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.

SeverityHigh
CVSS7.8
Exploit probability—
ProductRockwellautomation Arena
PublishedAug 5, 2025
First seenAug 5, 2025
Weakness typeCWE-121CWE-121

How to fix

Update
  • rockwellautomation arena16.20.10 or later

Affected products

ProductAffected versionsFixed in
rockwellautomation arenav < 16.20.1016.20.10

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.