VULNERABILITY INTELLIGENCE

CVE-2020-12025

CVSS score3.3 LOW
EPSS probability1.54%
CISA KEVNot currently listed
Published2020-07-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-611
  • nvd@nist.gov: CWE-611

Primary references