Rockwell Automation Studio 5000 Simulation Interface Local Code Execution Vulnerability

A local code execution vulnerability has been identified in Rockwell Automation's Studio 5000 Simulation Interface, affecting versions through 2.02. The issue arises within the API, where any Windows user can exploit path traversal sequences to extract files. This exploitation leads to the execution of scripts with Administrator privileges upon the next system reboot.

Impact

Exploitation of this vulnerability allows for local code execution with Administrator rights, executed on system reboot.

Remediation

Users can upgrade to Studio 5000 Simulation Interface version 3.0.0 to address this vulnerability. For those unable to upgrade, Rockwell Automation recommends following their security best practices.