Studio 5000 ® Simulation Interface vulnerabilities

2 known vulnerabilities in Studio 5000 ® Simulation Interface from Rockwell Automation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.9 High severity

  Studio 5000 ® Simulation Interface: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-11697Nov 11, 2025Rockwell Automation

  A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator p

• 8.9 High severity

  Studio 5000® Simulation Interface™: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-11696Nov 11, 2025Rockwell Automation

  A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.