CVE-2026-8312
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
29/100
Published: 2026-07-14
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Passive
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| rockwellautomation | arena | < 17.00.01 |
References & Advisories (1)
Vendor Advisory