HIGH CWE-787
CVE-2026-8312
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation·Arena® Simulation
7.0/ 10
CVSS 4.0
High severity
0.27%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 19% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jul 14, 2026
- Updated
- Jul 14, 2026
- First covered
- Jul 25, 2026
- Latest story
- 4 months ago
Summary
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.
CWE-787Out-of-bounds write
Attack profile
Attack vectorLocal
ComplexityLow
RequirementsNone
PrivilegesLow
User interactionPassive
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NAffected products
- Rockwell Automation Arena® SimulationV17.00.00 and prior