CVE-2025-7032

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.

Score

CVSS 4.0 8.4 High

Status

Analyzed - PSIRT@rockwellautomation.com

Published

2025-08-05

Last modified

2026-02-26

Weaknesses

CWE-121

Affected products

• Arena Simulation (Rockwell Automation)
• Arena (Rockwellautomation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1731.html