CVE-2020-12025

LOW 3.3CVE-2020-12025 · Published 14/07/2020 · updated 17/06/2026

In short

CVE-2020-12025 is a LOW (CVSS 3.3) vulnerability affecting studio 5000 logix designer (rockwellautomation).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
studio 5000 logix designer rockwellautomation	`= 32.00= 32.01= 32.02`	No fix yet

Description

Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.

References

us-cert.cisa.gov/ics/advisories/icsa-20-191-02 · Third Party Advisory

More vulnerabilities in studio 5000 logix designer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

studio 5000 logix designer

rockwellautomation

= 32.00= 32.01= 32.02

No fix yet

More vulnerabilities in studio 5000 logix designer

See all →