Vulnerabilidades do Rockwell Automation Studio 5000® Simulation Interface™
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Rockwell Automation Studio 5000® Simulation Interface™: 2 registro(s), com versões afetadas e correções.
CVE-2025-11697
Alta · 8.9
CWE-200 11/11/2025
Studio 5000 ® Simulation Interface Local Code Execution
A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.
CVE-2025-11696
Alta · 8.9
CWE-22 11/11/2025
Studio 5000 ® Simulation Interface SSRF
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.