Description
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | Studio 5000® Simulation Interface™ | 2.02 and prior | — |
Advisories 2
- ICSA-25-317-06 Rockwell Automation Studio 5000 Simulation Interface CISA ICS & IT advisories · Nov 13, 2025
- WID-SEC-2025-2538 Rockwell Automation Studio 5000: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2025