Security Advisory

CVE-2025-11697

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-11 13:49:49
Last updated 2025-11-12 20:03:12
Assigner Rockwell
State PUBLISHED

Description

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.