An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap.

potentially resulting in a complete loss of confidentiality, integrity, and availability.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-29462
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139391
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-10