CVE-2025-7971 - CVE House
Back to Database
Status published High CVE-2025-7971

Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability

Vulnerability Description

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7971

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Rockwell Automation

View all reports →

Affected Software

Studio 5000 Logix Designer®
Vulnerable Versions:
V36.00.02

Timeline

Official Publish: August 14th, 2025
Last Modified: August 14th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)