AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-21912

HIGH · CVSS 7.8 EPSS 0.26% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-03-26 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2024-21912
Severity
HIGH
CVSS
7.8
EPSS
0.26%

Original NVD Description

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.

Related CVEs

Other vulnerabilities affecting the same vendor(s)