Rockwell Automation Studio 5000® Simulation Interface™ vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Rockwell Automation Studio 5000® Simulation Interface™: 2 record(s), with affected versions and fixes.
CVE-2025-11697
High · 8.9
CWE-200 Nov 11, 2025
Studio 5000 ® Simulation Interface Local Code Execution
A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.
CVE-2025-11696
High · 8.9
CWE-22 Nov 11, 2025
Studio 5000 ® Simulation Interface SSRF
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.