CVE-2018-8843

Rockwell Automation Arena versions 15.10.00 and prior contains a use after free vulnerability caused by processing specially crafted Arena Simulation Software files that may cause the software application to crash, potentially losing any unsaved data..

Score

CVSS 3.0 5.5 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-05-14

Last modified

2024-09-16

Weaknesses

CWE-416

Affected products

• Rockwell Automation Arena (Ics-cert)
• Arena (Rockwellautomation)

References

• http://www.securityfocus.com/bid/104166
• https://ics-cert.us-cert.gov/advisories/ICSA-18-130-02