Local Code Execution Vulnerability in Studio 5000 Simulation Interface by Rockwell Automation

CVE-2025-11697

What is CVE-2025-11697?

A security issue has been identified in the Studio 5000® Simulation Interface™, allowing local code execution via an API vulnerability. This flaw enables any Windows user on the system to exploit path traversal sequences, which can lead to unauthorized script execution with Administrator privileges whenever the system is rebooted. This poses a significant risk, as it could allow malicious actors to manipulate system operations and gain control over critical resources.

References