VULNERABILITY INTELLIGENCE
CVE-2025-7032
CVSS score7.8 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-08-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.
Weakness classification
- PSIRT@rockwellautomation.com: CWE-121
Primary references
- PSIRT@rockwellautomation.com — Vendor Advisory