CVE-2024-11157

A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

• CWE-787
• CWE-787

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.htmlVendor Advisory

Published

Dec 19, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1115A vulnerability was found in openBI up to 1.0.8 and classifi…9.8
• CVE-2024-11150The WordPress User Extra Fields plugin for WordPress is vuln…9.8
• CVE-2024-11153The Content Control – The Ultimate Content Restriction Plugi…5.3
• CVE-2024-11154The PublishPress Revisions: Duplicate Posts, Submit, Approve…4.3
• CVE-2024-11155A “use after free” code execution vulnerability exists in t…8.5
• CVE-2024-11156An “out of bounds write” code execution vulnerability exist…7.8
• CVE-2024-11158An “uninitialized variable” code execution vulnerability exi…8.5
• CVE-2024-11159Using remote content in OpenPGP encrypted messages can lead …4.3
• CVE-2024-1116A vulnerability was found in openBI up to 1.0.8. It has been…9.8
• CVE-2024-11160Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-11165An information disclosure vulnerability exists in the backup…5.7
• CVE-2024-11166For TCAS II systems using transponders compliant with MOPS e…7.1