Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313346 - https://vuldb.com/?ctiid.313346 - https://vuldb.com/?submit.597283 - https://github.com/AlbaDove/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6355 State: PUBLISHED Published: 2025-06-20T17:00:10.035Z Last Updated: 2025-06-23T15:29:20.836Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execeditroom.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313348 - https://vuldb.com/?ctiid.313348 - https://vuldb.com/?submit.597296 - https://github.com/rom4j/cve/issues/15 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6356 State: PUBLISHED Published: 2025-06-20T17:31:05.591Z Last Updated: 2025-06-23T15:24:34.333Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /addmem.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313349 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313349 - https://vuldb.com/?ctiid.313349 - https://vuldb.com/?submit.597297 - https://github.com/rom4j/cve/issues/14 - https://code-projects.org/
CVE ID: CVE-2025-6357 State: PUBLISHED Published: 2025-06-20T17:31:07.289Z Last Updated: 2025-06-20T17:50:38.840Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /paymentportal.php. The manipulation of the argument person leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313350 - https://vuldb.com/?ctiid.313350 - https://vuldb.com/?submit.597298 - https://github.com/rom4j/cve/issues/13 - https://code-projects.org/
CVE ID: CVE-2025-6358 State: PUBLISHED Published: 2025-06-20T18:00:15.624Z Last Updated: 2025-06-23T15:23:31.972Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /saveorder.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313351 - https://vuldb.com/?ctiid.313351 - https://vuldb.com/?submit.597299 - https://github.com/rom4j/cve/issues/12 - https://code-projects.org/
CVE ID: CVE-2025-6359 State: PUBLISHED Published: 2025-06-20T18:31:04.986Z Last Updated: 2025-06-23T15:21:58.604Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cashconfirm.php. The manipulation of the argument transactioncode leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313352 - https://vuldb.com/?ctiid.313352 - https://vuldb.com/?submit.597300 - https://github.com/rom4j/cve/issues/11 - https://code-projects.org/
CVE ID: CVE-2025-6360 State: PUBLISHED Published: 2025-06-20T19:00:14.786Z Last Updated: 2025-06-20T20:12:34.976Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /portal.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313353 - https://vuldb.com/?ctiid.313353 - https://vuldb.com/?submit.597301 - https://github.com/rom4j/cve/issues/10 - https://code-projects.org/
CVE ID: CVE-2025-6361 State: PUBLISHED Published: 2025-06-20T19:31:04.970Z Last Updated: 2025-06-20T20:01:09.397Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Simple Pizza Ordering System 1.0. This vulnerability affects unknown code of the file /adds.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313354 - https://vuldb.com/?ctiid.313354 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313354 - https://vuldb.com/?ctiid.313354 - https://vuldb.com/?submit.597302 - https://github.com/rom4j/cve/issues/9 - https://code-projects.org/
CVE ID: CVE-2025-6362 State: PUBLISHED Published: 2025-06-20T19:31:06.636Z Last Updated: 2025-06-20T19:57:33.904Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Simple Pizza Ordering System 1.0. This issue affects some unknown processing of the file /editpro.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313355 - https://vuldb.com/?ctiid.313355
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313355 - https://vuldb.com/?ctiid.313355 - https://vuldb.com/?submit.597303 - https://github.com/rom4j/cve/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-6363 State: PUBLISHED Published: 2025-06-20T20:00:14.259Z Last Updated: 2025-06-23T15:19:13.363Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /adding-exec.php. The manipulation of the argument ingname leads to sql injection. It is possible to launch the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313356 - https://vuldb.com/?ctiid.313356
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313356 - https://vuldb.com/?ctiid.313356 - https://vuldb.com/?submit.597304 - https://github.com/rom4j/cve/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-6364 State: PUBLISHED Published: 2025-06-20T20:31:04.996Z Last Updated: 2025-06-23T15:18:36.890Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adduser-exec.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313357 - https://vuldb.
remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313357 - https://vuldb.com/?ctiid.313357 - https://vuldb.com/?submit.597305 - https://github.com/rom4j/cve/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-6365 State: PUBLISHED Published: 2025-06-20T20:31:06.583Z Last Updated: 2025-06-23T15:18:08.528Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:X/RL:X/RC:R) Vendors: HobbesOSR Products: Kitten Problem Types: CWE-400, CWE-404 Description: A vulnerability was found in HobbesOSR Kitten up to c4f8b7c3158983d1020af432be1b417b28686736 and classified as critical. Affected by this issue is the function set_pte_at in the library /include/arch-arm64/pgtable.h. The manipulation leads to resource consumption. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Addition
releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313358 - https://vuldb.com/?ctiid.313358 - https://vuldb.com/?submit.597382 - https://github.com/HobbesOSR/kitten/issues/17
CVE ID: CVE-2025-6366 State: PUBLISHED Published: 2025-08-26T14:26:53.944Z Last Updated: 2025-08-26T15:07:45.824Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ovatheme.com Products: Event List Problem Types: CWE-269 Description: The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the el_update_profile() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change their capabilities to those of an administrator. Additional Analyst Notes:
Subscriber-level access and above, to change their capabilities to those of an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5998520b-62fd-4b3d-9b78-6363b72b406d?source=cve - https://themeforest.net/item/meup-marketplace-events-wordpress-theme/24770641
CVE ID: CVE-2025-6367 State: PUBLISHED Published: 2025-06-20T21:00:15.159Z Last Updated: 2025-06-23T15:17:30.820Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DIR-619L 2.06B01. It has been declared as critical. This vulnerability affects unknown code of the file /goform/formSetDomainFilter. The manipulation of the argument curTime/sched_name_%d/url_%d leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported
has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313360 - https://vuldb.com/?ctiid.313360 - https://vuldb.com/?submit.597420 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_67/67.md - https://www.dlink.com/
CVE ID: CVE-2025-6368 State: PUBLISHED Published: 2025-06-20T21:31:05.469Z Last Updated: 2025-06-23T15:02:25.365Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DIR-619L 2.06B01. It has been rated as critical. This issue affects the function formSetEmail of the file /goform/formSetEmail. The manipulation of the argument curTime/config.smtp_email_subject leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported
has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313361 - https://vuldb.com/?ctiid.313361 - https://vuldb.com/?submit.597421 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_68/68.md - https://www.dlink.com/
CVE ID: CVE-2025-6369 State: PUBLISHED Published: 2025-06-20T21:31:07.219Z Last Updated: 2025-06-23T15:01:56.138Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in D-Link DIR-619L 2.06B01. Affected is the function formdumpeasysetup of the file /goform/formdumpeasysetup. The manipulation of the argument curTime/config.save_network_enabled leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer
he exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313362 - https://vuldb.com/?ctiid.313362 - https://vuldb.com/?submit.597422 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_69/69.md - https://www.dlink.com/
CVE ID: CVE-2025-6370 State: PUBLISHED Published: 2025-06-20T22:00:15.539Z Last Updated: 2025-06-23T15:01:24.958Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulnerability is the function formWlanGuestSetup of the file /goform/formWlanGuestSetup. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the
n disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313363 - https://vuldb.com/?ctiid.313363 - https://vuldb.com/?submit.597423 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_70/70.md - https://www.dlink.com/
CVE ID: CVE-2025-6371 State: PUBLISHED Published: 2025-06-20T22:31:05.983Z Last Updated: 2025-06-23T15:00:54.558Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer suppor
oit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313364 - https://vuldb.com/?ctiid.313364 - https://vuldb.com/?submit.597424 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_71/71.md - https://www.dlink.com/
CVE ID: CVE-2025-6372 State: PUBLISHED Published: 2025-06-20T23:00:11.146Z Last Updated: 2025-06-23T15:15:18.408Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formSetWizard1 of the file /goform/formSetWizard1. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the mainta
losed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313365 - https://vuldb.com/?ctiid.313365 - https://vuldb.com/?submit.597426 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_72/72.md - https://www.dlink.com/
CVE ID: CVE-2025-6373 State: PUBLISHED Published: 2025-06-20T23:31:05.091Z Last Updated: 2025-06-23T19:28:09.999Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the function formSetWizard1 of the file /goform/formWlSiteSurvey. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the mai
isclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313366 - https://vuldb.com/?ctiid.313366 - https://vuldb.com/?submit.597427 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_73/73.md - https://www.dlink.com/
CVE ID: CVE-2025-6374 State: PUBLISHED Published: 2025-06-21T00:00:14.766Z Last Updated: 2025-06-23T19:28:04.581Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formSetACLFilter of the file /goform/formSetACLFilter. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Ad
the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313367 - https://vuldb.com/?ctiid.313367 - https://vuldb.com/?submit.597428 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_74/74.md - https://www.dlink.com/
CVE ID: CVE-2025-6375 State: PUBLISHED Published: 2025-06-21T00:31:06.881Z Last Updated: 2025-06-23T14:44:10.943Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: poco Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.14.2 is able to address this issue. The patch is identified as 6f2
to the public and may be used. Upgrading to version 1.14.2 is able to address this issue. The patch is identified as 6f2f85913c191ab9ddfb8fae781f5d66afccf3bf. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313370 - https://vuldb.com/?ctiid.313370 - https://vuldb.com/?submit.597446 - https://github.com/pocoproject/poco/issues/4915 - https://github.com/user-attachments/files/19524599/poco_crash.txt - https://github.com/pocoproject/poco/commit/6f2f85913c191ab9ddfb8fae781f5d66afccf3bf - https://github.com/pocoproject/poco/releases/tag/poco-1.14.2-release
CVE ID: CVE-2025-6376 State: PUBLISHED Published: 2025-07-09T20:13:45.320Z Last Updated: 2025-07-09T20:33:10.343Z Vendors: Rockwell Automation Products: Arena® Problem Types: CWE-20 Description: A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT
he context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1729.html
CVE ID: CVE-2025-6377 State: PUBLISHED Published: 2025-07-09T20:12:47.647Z Last Updated: 2025-07-09T20:39:10.481Z Vendors: Rockwell Automation Products: Arena® Problem Types: CWE-20 Description: A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT