Rockwell has patched code-execution flaws in Arena Simulation, and the case shows how trusted engineering files can turn workstation software into an entry point.