CVE-2025-7971

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash.

Score

CVSS 4.0 7.3 High

Status

Deferred - PSIRT@rockwellautomation.com

Published

2025-08-14

Last modified

2025-08-14

Weaknesses

CWE-20

Affected products

• Studio 5000 Logix Designer (Rockwell Automation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1734.html