CVE-2019-13510

Published: Aug 15, 2019Modified: Dec 17, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.

Affected (1)

Products: Rockwellautomation: Arena

Rockwellautomation

1 product

Arena

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rockwellautomation Arena	Up to 16.00.00

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (26)

https://www.us-cert.gov/ics/advisories/icsa-19-213-05

Source: ics-cert@hq.dhs.gov

MitigationThird Party AdvisoryUS Government Resource

https://www.zerodayinitiative.com/advisories/ZDI-19-1000/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-19-800/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-19-801/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-19-994/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-19-998/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-19-999/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-20-926/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-20-927/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-20-928/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-20-929/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-20-930/

Source: ics-cert@hq.dhs.gov

https://www.zerodayinitiative.com/advisories/ZDI-20-931/

Source: ics-cert@hq.dhs.gov

https://www.us-cert.gov/ics/advisories/icsa-19-213-05