ICS Advisory: Rockwell Automation Arena

Here is a summary of the provided document:

Summary:

The document reports multiple vulnerabilities in Rockwell Automation's Arena software versions 16.20.00001 and earlier. The vulnerabilities allow an attacker to execute arbitrary code, leak memory, and achieve code execution. These vulnerabilities can be exploited by attackers with local access to an affected system. Rockwell Automation recommends upgrading the affected software to a newer version, implementing security best practices, and minimizing network exposure. The Cybersecurity and Infrastructure Security Agency (CISA) provides additional guidance on mitigating and defending against these vulnerabilities, including recommendations for implementing control systems security and performing proactive defense. As of the initial publication date, no public exploitation of these vulnerabilities has been reported.