Rockwell Automation Studio 5000 Simulation Interface vulnerabilities

2 CVEs affecting Rockwell Automation Studio 5000 Simulation Interface, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-11697, published 2025-11-11.

More from Rockwell Automation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-11696, published 2025-11-11. High severity, CVSS 8.9. EPSS: 0.2% chance of exploitation in the next 30 days. A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound…
• CVE-2025-11697, published 2025-11-11. High severity, CVSS 8.9. EPSS: 0.2% chance of exploitation in the next 30 days. A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal…