CVE-2019-13527: Rockwell Automation Arena Simulation DOE File Parsing Uninitialized Pointer Dereference Remote Code Execution Vulnerability
First published: Tue Sep 24 2019(Updated: )
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rockwellautomation Arena Simulation Software | <=16.00.00 | |
| Rockwell Automation Arena Simulation | ||
| Rockwellautomation Arena | <=16.00.00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-13527?
The severity of CVE-2019-13527 is high.
How can remote attackers exploit CVE-2019-13527?
Remote attackers can exploit CVE-2019-13527 by executing arbitrary code on affected installations of Rockwell Automation Arena Simulation, requiring user interaction to visit a malicious page or open a malicious file.
Which software is affected by CVE-2019-13527?
CVE-2019-13527 affects Rockwell Automation Arena Simulation software version 16.00.00.
How can I fix CVE-2019-13527?
To fix CVE-2019-13527, users should apply the necessary security patches or updates provided by Rockwell Automation.
Where can I find more information about CVE-2019-13527?
More information about CVE-2019-13527 can be found on the US-CERT and Zero Day Initiative websites.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/description
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-19-993
- alias/ZDI-CAN-8682
- alias/CVE-2019-13527
- agent/software-canonical-lookup
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/tags
- agent/softwarecombine
- agent/trending
- vendor/rockwellautomation
- canonical/rockwellautomation arena simulation software
- version/rockwellautomation arena simulation software/16.00.00
- vendor/rockwell automation
- canonical/rockwell automation arena simulation
- canonical/rockwellautomation arena
- version/rockwellautomation arena/16.00.00