Rockwell Automation Studio 5000 Simulation Interface Server-Side Request Forgery Vulnerability
Vulnerability
A local server-side request forgery (SSRF) vulnerability has been identified in Rockwell Automation's Studio 5000 Simulation Interface, affecting version 2.02 and prior. This vulnerability allows any Windows user on the system to send outbound SMB requests, potentially capturing NTLM hashes.
Impact
Exploitation of this vulnerability allows for server-side request forgery, with the possibility of intercepting NTLM authentication hashes.
Remediation
Users can upgrade to version 3.0.0 to address this vulnerability. Instructions for downloading the updated version are available on the Rockwell Automation Compatibility Center.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.