PT-2026-5809 · Rockwell Automation · Studio 5000 Logix Designer+1

Luis Martinez · Publicado 2026-02-04 · Atualizado 2026-02-05 · CVE-2019-25276

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Studio 5000 Logix Designer version 30.01.00

Description Studio 5000 Logix Designer 30.01.00 has an unquoted service path issue within the FactoryTalk Activation Service. This allows local users to potentially run code with higher privileges. The unquoted path, located at C:Program Files (x86)Rockwell SoftwareFactoryTalk Activation, can be exploited to inject malicious code that executes with LocalSystem permissions.

Recommendations Ensure the service path for FactoryTalk Activation Service is properly quoted to prevent malicious code execution.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-25276

Produtos afetados

Factorytalk Activation Service

Studio 5000 Logix Designer

Referências · 5

• 🔥 https://exploit-db.com/exploits/47676 · Exploit
• https://vulncheck.com/advisories/studio-logix-designer-factorytalk-activation-service-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25276 · Nota de Segurança
• https://rockwellautomation.com/en_NA/overview.page · Nota
• https://t.me/CVEtracker/43779 · Publicação no Telegram