CVE-2025-7033: Rockwellautomation Arena

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.

Affected products

• Rockwellautomation Arena: before 16.20.10 (fixed in 16.20.10)

Published 2025-08-05. Last modified 2026-06-17.