CVE-2024-12672

A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

• CWE-787

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.htmlVendor Advisory

Published

Dec 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12667A vulnerability was found in InvoicePlane up to 1.6.1 and cl…5.9
• CVE-2024-12668Velocidex WinPmem versions below 4.1 suffer from an Out of B…8.2
• CVE-2024-12669A maliciously crafted DWFX file, when parsed through Autodes…7.8
• CVE-2024-1267A vulnerability, which was classified as problematic, has be…6.1
• CVE-2024-12670A maliciously crafted DWFX file, when parsed through Autodes…7.8
• CVE-2024-12671A maliciously crafted DWFX file, when parsed through Autodes…7.8
• CVE-2024-12673An improper privilege vulnerability was reported in a BIOS c…8.5
• CVE-2024-12677Delta Electronics DTM Soft deserializes objects, which could…8.5
• CVE-2024-12678Nomad Community and Nomad Enterprise ("Nomad") allocations a…6.5
• CVE-2024-12679The Prisna GWT WordPress plugin before 1.4.14 does not sani…4.8
• CVE-2024-1268A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-12680The Prisna GWT WordPress plugin before 1.4.14 does not sani…4.8