CVE-2025-3287: Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3287?
CVE-2025-3287 is classified as a high-severity vulnerability due to its potential for local code execution.
How do I fix CVE-2025-3287?
To fix CVE-2025-3287, you should apply the latest security patches provided by Rockwell Automation for Arena.
Who is affected by CVE-2025-3287?
Any user of Rockwell Automation Arena that has not implemented the necessary security updates is vulnerable to CVE-2025-3287.
What can an attacker do with CVE-2025-3287?
An attacker exploiting CVE-2025-3287 can execute arbitrary code and potentially disclose sensitive information on the affected system.
How does CVE-2025-3287 exploit the system?
CVE-2025-3287 exploits the system through a stack-based memory buffer overflow resulting from improper validation of user input.