PT-2026-5809 · Rockwell Automation · Studio 5000 Logix Designer+1

Luis Martinez · Published 2026-02-04 · Updated 2026-02-05 · CVE-2019-25276

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Studio 5000 Logix Designer version 30.01.00

Description Studio 5000 Logix Designer 30.01.00 has an unquoted service path issue within the FactoryTalk Activation Service. This allows local users to potentially run code with higher privileges. The unquoted path, located at C:Program Files (x86)Rockwell SoftwareFactoryTalk Activation, can be exploited to inject malicious code that executes with LocalSystem permissions.

Recommendations Ensure the service path for FactoryTalk Activation Service is properly quoted to prevent malicious code execution.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-25276

Affected Products

Factorytalk Activation Service

Studio 5000 Logix Designer

References · 5

• 🔥 https://exploit-db.com/exploits/47676 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25276 · Security Note
• https://vulncheck.com/advisories/studio-logix-designer-factorytalk-activation-service-unquoted-service-path · Note
• https://rockwellautomation.com/en_NA/overview.page · Note
• https://t.me/CVEtracker/43779 · Telegram Post