Skip to content
OpenAdvisories
Medium WID-SEC-2026-2336 3 CVEs

Rockwell Automation Studio 5000 Logix Designer: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jul 14, 2026 · Updated Jul 14, 2026 · de-DE

Vendor: Rockwell Automation Product: Studio 5000 Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Rockwell Automation Studio 5000 Logix Designer ausnutzen, um beliebigen Programmcode auszuführen.

Product

Studio 5000 ist eine Produktsuite zur Gestaltung von Industriesteuerungen und -Prozessen.

Vulnerabilities 3

  • High 7.3
    CVE-2026-9127

    Studio 5000 Logix Designer® – Multiple Vulnerabilities

    A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploite…

    Rockwell Automation Studio 5000 Logix Designer ICS / OT
  • High 7.3
    CVE-2026-9128

    Studio 5000 Logix Designer® – Multiple Vulnerabilities

    A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these pa…

    Rockwell Automation Studio 5000 Logix Designer ICS / OT
  • Medium 5.4
    CVE-2026-9108

    Studio 5000 Logix Designer® – Multiple Vulnerabilities

    A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during the project opening pr…

    Rockwell Automation Studio 5000 Logix Designer ICS / OT

Revision history

  1. #1

    Initiale Fassung

References