CVE-2024-21912

Summary

CVE-2024-21912 is a critical arbitrary code execution vulnerability affecting Rockwell Automation Arena Simulation software. Malicious users can exploit this issue by writing unauthorized code beyond the designated memory area, leading to an access violation. Upon triggering this vulnerability by opening a maliciously crafted file, attackers gain the ability to execute harmful code on the system. This vulnerability poses risks to the confidentiality, integrity, and availability of the product.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.