cnvd - cnvd-2024-18334

cnvd-2024-18334

Vulnerability from cnvd

Title: Rockwell Automation Arena Simulation Software未初始化指针访问漏洞

Description:

Rockwell Automation Arena Simulation Software是美国罗克韦尔（Rockwell Automation）公司的一套提供3D动画和图形功能的仿真软件。

Rockwell Automation Arena Simulation Software存在未初始化指针访问漏洞，攻击者可在指针正确后利用该漏洞向软件插入未经授权的代码。

Severity: 高

Patch Name: Rockwell Automation Arena Simulation Software未初始化指针访问漏洞的补丁

Patch Description:

Rockwell Automation Arena Simulation Software是美国罗克韦尔（Rockwell Automation）公司的一套提供3D动画和图形功能的仿真软件。

Rockwell Automation Arena Simulation Software存在未初始化指针访问漏洞，攻击者可在指针正确后利用该漏洞向软件插入未经授权的代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://download.rockwellautomation.com/esd/download.aspx?downloadid=RAid1141475

Reference: https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html

Impacted products

Name
Rockwell Automation Arena Simulation Software 16.00

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-21919"
    }
  },
  "description": "Rockwell Automation Arena Simulation Software\u662f\u7f8e\u56fd\u7f57\u514b\u97e6\u5c14\uff08Rockwell Automation\uff09\u516c\u53f8\u7684\u4e00\u5957\u63d0\u4f9b3D\u52a8\u753b\u548c\u56fe\u5f62\u529f\u80fd\u7684\u4eff\u771f\u8f6f\u4ef6\u3002 \n\nRockwell Automation Arena Simulation Software\u5b58\u5728\u672a\u521d\u59cb\u5316\u6307\u9488\u8bbf\u95ee\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5728\u6307\u9488\u6b63\u786e\u540e\u5229\u7528\u8be5\u6f0f\u6d1e\u5411\u8f6f\u4ef6\u63d2\u5165\u672a\u7ecf\u6388\u6743\u7684\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://download.rockwellautomation.com/esd/download.aspx?downloadid=RAid1141475",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-18334",
  "openTime": "2024-04-19",
  "patchDescription": "Rockwell Automation Arena Simulation Software\u662f\u7f8e\u56fd\u7f57\u514b\u97e6\u5c14\uff08Rockwell Automation\uff09\u516c\u53f8\u7684\u4e00\u5957\u63d0\u4f9b3D\u52a8\u753b\u548c\u56fe\u5f62\u529f\u80fd\u7684\u4eff\u771f\u8f6f\u4ef6\u3002 \r\n\r\nRockwell Automation Arena Simulation Software\u5b58\u5728\u672a\u521d\u59cb\u5316\u6307\u9488\u8bbf\u95ee\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5728\u6307\u9488\u6b63\u786e\u540e\u5229\u7528\u8be5\u6f0f\u6d1e\u5411\u8f6f\u4ef6\u63d2\u5165\u672a\u7ecf\u6388\u6743\u7684\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Rockwell Automation Arena Simulation Software\u672a\u521d\u59cb\u5316\u6307\u9488\u8bbf\u95ee\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Rockwell Automation Arena Simulation Software 16.00"
  },
  "referenceLink": "https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html",
  "serverity": "\u9ad8",
  "submitTime": "2024-03-27",
  "title": "Rockwell Automation Arena Simulation Software\u672a\u521d\u59cb\u5316\u6307\u9488\u8bbf\u95ee\u6f0f\u6d1e"
}

CVE-2024-21919 (GCVE-0-2024-21919)

Vulnerability from cvelistv5

Published

2024-03-26 15:46

Modified

2024-08-02 17:55

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-824 - Access of Uninitialized Pointer

Summary

An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.

References

▼	URL	Tags
	https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html

Impacted products

	Vendor	Product	Version
	Rockwell Automation	Arena Simulation	Version: Version 16.00 - 16.20.02

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:35:34.615Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:rockwellautomation:arena_simulation:16.00.00:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "arena_simulation",
            "vendor": "rockwellautomation",
            "versions": [
              {
                "lessThanOrEqual": "16.20.02",
                "status": "affected",
                "version": "16.00.00",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21919",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-02T17:52:56.306084Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:55:57.699Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Arena Simulation",
          "vendor": "Rockwell Automation",
          "versions": [
            {
              "status": "affected",
              "version": "Version 16.00 - 16.20.02"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Michael Heinzl"
        }
      ],
      "datePublic": "2024-03-26T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eAn uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly.  Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.\u003c/span\u003e\n\n"
            }
          ],
          "value": "\nAn uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly.  Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.\n\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-824",
              "description": "CWE-824 Access of Uninitialized Pointer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-26T15:46:38.129Z",
        "orgId": "b73dd486-f505-4403-b634-40b078b177f0",
        "shortName": "Rockwell"
      },
      "references": [
        {
          "url": "https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to v16.20.03"
            }
          ],
          "value": "Update to v16.20.03"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0",
    "assignerShortName": "Rockwell",
    "cveId": "CVE-2024-21919",
    "datePublished": "2024-03-26T15:46:38.129Z",
    "dateReserved": "2024-01-03T16:40:50.368Z",
    "dateUpdated": "2024-08-02T17:55:57.699Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted