PT-2025-46339 · Rockwell Automation · Studio 5000® Simulation Interface™

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-11696

Positive Technologies (AI Summary)

CVSS v4.0

8.9

High

Base vector

AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Studio 5000 Simulation Interface (affected versions not specified)

Description A local server-side request forgery (SSRF) issue exists within the Studio 5000® Simulation Interface™ via the API. This allows any Windows user on the system to trigger outbound SMB requests, potentially enabling the capture of NTLM hashes. The issue involves the API and allows for server-side request forgery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-11696

Affected Products

Studio 5000® Simulation Interface™

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11696 · Security Note
• https://t.me/cveNotify/142408 · Telegram Post
• https://twitter.com/CVEnew/status/1988249426650165248 · Twitter Post
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1760.html · Note
• https://t.me/CVEtracker/37039 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1988280747782709676 · Twitter Post