CVE-2019-13511 Information disclosure in Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier

What is CVE-2019-13511?

CVE-2019-13511 is a low-severity vulnerability in Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier, published on 15 Aug 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation.

Weakness: CWE-416, CWE-200

Which versions are affected by CVE-2019-13511?

It affects 1 product.

Products include Rockwellautomation Arena.

How do I fix CVE-2019-13511?

No fix has been published for CVE-2019-13511 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-13511 being exploited?

There is no known exploitation of CVE-2019-13511 in the wild and no public exploit code.

Other vulnerabilities in Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier

• CVE-2025-2285 Local Code Execution Vulnerability in Arena® High 8.5
• CVE-2025-2286 Local Code Execution Vulnerability in Arena® High 8.5
• CVE-2025-2287 Local Code Execution Vulnerability in Arena® High 8.5
• CVE-2025-2288 Local Code Execution Vulnerability in Arena® High 8.5
• CVE-2025-2293 Local Code Execution Vulnerability in Arena® High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6p7p-7664-cqrj.