CVE-2019-25276 - Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path

Back Back to CVE browser

HIGH

Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path

Published Feb 4, 2026

8.5

HIGH

CVSS 4.0

EPSS 0.21%

Description

Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\ to inject malicious code that would execute with LocalSystem permissions.

Affected products

Vendor Rockwell Automation Product Studio Default
n/a
- Version
  5000
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rockwell Automation

Studio

n/a

Version	Status	Constraints
5000	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-428

References (3)

https://www.exploit-db.com/exploits/47676
exploit
https://www.rockwellautomation.com/en_NA/overview.page
product
https://www.vulncheck.com/advisories/studio-logix-designer-factorytalk-activation-service-unquoted-service-path
third-party-advisory

Link	Providers	Tags
https://www.exploit-db.com/exploits/47676		exploit
https://www.rockwellautomation.com/en_NA/overview.page		product
https://www.vulncheck.com/advisories/studio-logix-designer-factorytalk-activation-service-unquoted-service-path		third-party-advisory