Rockwellautomation Studio 5000 Logix Designer vulnerabilities

7 CVEs affecting Rockwellautomation Studio 5000 Logix Designer, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9128, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22681: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability, published 2021-03-03. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-03-05. EPSS: 63.6% chance of exploitation in the next 30 days. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation…
CVE-2020-12038, published 2020-05-19. Medium severity, CVSS 5.5. EPSS: 2.6% chance of exploitation in the next 30 days. Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior,…
CVE-2020-12025, published 2020-07-14. Low severity, CVSS 3.3. EPSS: 1.5% chance of exploitation in the next 30 days. Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other…
CVE-2020-12034, published 2020-05-20. High severity, CVSS 8.2. EPSS: 1.3% chance of exploitation in the next 30 days. Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior,…
CVE-2026-9108, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names…
CVE-2026-9128, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the…
CVE-2026-9127, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of…