Rockwell Automation · Studio 5000 Logix Designer · CVE-2019-25276
**Name of the Vulnerable Software and Affected Versions**
Studio 5000 Logix Designer version 30.01.00
**Description**
Studio 5000 Logix Designer 30.01.00 has an unquoted service path issue within the FactoryTalk Activation Service. This allows local users to potentially run code with higher privileges. The unquoted path, located at `C:Program Files (x86)Rockwell SoftwareFactoryTalk Activation`, can be exploited to inject malicious code that executes with LocalSystem permissions.
**Recommendations**
Ensure the service path for FactoryTalk Activation Service is properly quoted to prevent malicious code execution.