Skip to content
OpenAdvisories

Product · Rockwell Automation

Studio 5000 ® Simulation Interface

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.9

    Studio 5000 ® Simulation Interface Local Code Execution

    A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator …

  • High 8.9

    Studio 5000 ® Simulation Interface SSRF

    A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.