Skip to content
OpenAdvisories
High · 7.3 CVE-2025-7971 EUVD-2025-24827GHSA-6643-674m-c2cp

Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability

Published Aug 14, 2025 · Updated Aug 14, 2025 · Assigned by Rockwell

Description

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash.

Affected products

VendorProductAffectedFixed
Rockwell Automation Studio 5000 Logix Designer® V36.00.02 —

Advisories 2

References