PT-2025-46344 · Rockwell Automation · Studio 5000® Simulation Interface™

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-11697

Positive Technologies (AI Summary)

CVSS v4.0

8.9

High

Base vector

AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Studio 5000® Simulation Interface™ (affected versions not specified)

Description A local code execution issue exists within Studio 5000® Simulation Interface™ through its API. A Windows user on the system can extract files using path traversal sequences. This can lead to the execution of scripts with Administrator privileges upon system reboot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-11697

Affected Products

Studio 5000® Simulation Interface™

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11697 · Security Note
• https://t.me/cveNotify/142409 · Telegram Post
• https://t.me/CVEtracker/37040 · Telegram Post
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1760.html · Note
• https://twitter.com/CVEnew/status/1988249425517633966 · Twitter Post