CVE-2025-7971CWE-20

Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability

High · published August 14, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00127 · 2.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-08-14T15:02Z
EPSS history
Timeline
  • 14 AUG 15:02Z
    Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability
    cvelistv5