CVE-2024-21919

Summary

CVE-2024-21919 is a vulnerability affecting Rockwell Automation Arena Simulation software. An uninitialized pointer in the software may allow a malicious user to inject unauthorized code, potentially leading to data compromise or system takeover. Triggering this issue requires opening a specially crafted file provided by the attacker. This vulnerability poses risks to the confidentiality, integrity, and availability of the product.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.