Studio 5000 Logix Designer vulnerabilities
6 known vulnerabilities in Studio 5000 Logix Designer from Rockwell Automation. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Studio 5000 Logix Designer: Unquoted Search Path or Element
A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these pat
- 7.5 High severity
Studio 5000 Logix Designer: Incorrect Authorization
A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited
- 7.5 High severity
Studio 5000 Logix Designer: Improper Limitation of a Pathname to a Restricted Directory
A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during the project opening pro
- 7.3 High severity
A security issues exists within Studio 5000 Logix Designer due to unsafe handling of…
A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash.
- 7.2 High severity
Studio 5000 Logix Designer: Improper Control of Generation of Code
Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.
- 9.8 Critical severity
Rockwell Multiple Products Insufficient Protected Credentials Exploited
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5