CVE-2025-7032

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.

• CWE-121

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1731.htmlVendor Advisory

Published

Aug 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-70308An out-of-bounds read in the GSF demuxer filter component of…7.5
• CVE-2025-70309A stack overflow in the pcmreframe_flush_packet function of …5.5
• CVE-2025-7031Missing Authentication for Critical Function vulnerability i…5.3
• CVE-2025-70310A heap overflow in the vorbis_to_intern() function of GPAC v…5.5
• CVE-2025-70311JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inj…6.5
• CVE-2025-70314webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted…9.8
• CVE-2025-70327TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument…9.8
• CVE-2025-70328TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS comma…8.8
• CVE-2025-70329TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS comma…8
• CVE-2025-7033A memory abuse issue exists in the Rockwell Automation Arena…7.8
• CVE-2025-70330Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in…3.3
• CVE-2025-70336A Stored cross-site scripting (XSS) vulnerability in 'Create…4.8