Medium WID-SEC-2025-1844 1 CVE

Rockwell Automation Studio 5000 Logix Designer: Schwachstelle ermöglicht Codeausführung

Published Aug 14, 2025 · Updated Aug 14, 2025 · de-DE

Vendor: Rockwell Automation Product: Studio 5000 Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Rockwell Automation Studio 5000 Logix Designer ausnutzen, um beliebigen Programmcode auszuführen.

Product

Studio 5000 ist eine Produktsuite zur Gestaltung von Industriesteuerungen und -Prozesse.

Vulnerabilities 1

High 7.3

CVE-2025-7971

Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash.

Rockwell Automation Studio 5000 Logix Designer ICS / OT

Aug 14, 2025

Revision history

2025-08-14 #1
Initiale Fassung

References

Rockwell Security Advisory SD1734 vom 2025-08-14
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1734.html