CVE-2025-11696

Vulnerability Description

A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.

Related Weaknesses (CWE)

CWE-22

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/adviso

FAQ

What is CVE-2025-11696?

CVE-2025-11696 is a documented vulnerability. A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB...

How severe is CVE-2025-11696?

CVSS scoring is not yet available for CVE-2025-11696. Check NVD for updates.

Is there a patch for CVE-2025-11696?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.