CVE-2019-13510

Description

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.

References

https://www.zerodayinitiative.com/advisories/ZDI-20-931/

https://www.zerodayinitiative.com/advisories/ZDI-20-930/

https://www.zerodayinitiative.com/advisories/ZDI-20-929/

https://www.zerodayinitiative.com/advisories/ZDI-20-928/

https://www.zerodayinitiative.com/advisories/ZDI-20-927/

https://www.zerodayinitiative.com/advisories/ZDI-20-926/

https://www.zerodayinitiative.com/advisories/ZDI-19-999/

https://www.zerodayinitiative.com/advisories/ZDI-19-998/

https://www.zerodayinitiative.com/advisories/ZDI-19-994/

https://www.zerodayinitiative.com/advisories/ZDI-19-801/

https://www.zerodayinitiative.com/advisories/ZDI-19-800/

https://www.zerodayinitiative.com/advisories/ZDI-19-1000/

https://www.us-cert.gov/ics/advisories/icsa-19-213-05

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS