Back to Database
Status published
High
CVE-2019-13519
A maliciously crafted program file opened by an unsuspecting user...
Vulnerability Description
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13519
Credits & Attribution
No credits recorded in the NVD database.
References
More from Rockwell
View All →CVE-2019-13521
A maliciously crafted program file opened by an unsuspecting user...
High
7.8
CVE-2018-19016
Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version...
High
7.5
CVE-2018-18981
In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a...
High
7.5
Affected Vendor
Rockwell
View all reports →Affected Software
Rockwell Automation Arena Simulation Software
Vulnerable Versions:
Versions 16.00.00 and earlier
Timeline
Official Publish:
January 27th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H