Vulnerability · Published Nov 14, 2025 · Assigned by Rockwell
CVE-2025-11918Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability
High 7.1
In plain English
A high-severity stack buffer overflow in Arena® Simulation from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Official description
Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of Arena®. Exploiting the vulnerability requires opening a malicious DOE file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | Arena® Simulation | Version 16.20.10 and prior |
Weakness: CWE-121 · Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N