High severity · published Jan 27, 2020
CVE-2019-13519
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure…
7.8
CVSS
5.6%
EPSS
No
On KEV
Description
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Arena · Rockwellautomation
through 16.00.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-13519
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-13519
Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-213-05
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-19-802/
More from Arena
9.8
CVE-2023-29461
Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
9.8
CVE-2023-29460
Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
8.8
CVE-2023-29462
Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
7.8
CVE-2025-7033
Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation
7.8
CVE-2025-7032
Rockwell Automation Stack-based Buffer Overflow In Arena® Simulation