CVE-2025-11697 — Studio 5000 ® Simulation Interface Local Code Execution

CVE-2025-11697

Studio 5000 ® Simulation Interface Local Code Execution PUBLISHED

Description (CNA)

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / Studio 5000 ® Simulation Interface	affected 2.02 and prior

CWE

CWE-200

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1760.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.