CVE-2025-11696 — Studio 5000 ® Simulation Interface SSRF

CVE-2025-11696

Studio 5000 ® Simulation Interface SSRF PUBLISHED

Description (CNA)

A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / Studio 5000® Simulation Interface™	affected 2.02 and prior

CWE

CWE-22

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1760.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.