← Vulnerability feed

Vulnerability record · CVE-2020-12025 · published 14 July 2020

CVE-2020-12025: Rockwellautomation studio 5000 logix designer xml external entity (xxe) vulnerability

Rockwellautomation · Studio 5000 Logix Designer

Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.

3.3 CVSS 3.1 Low EPSS 1.5% · top 26.0% CWE-611 · XML external entity (XXE)
3.3CVSS 3.1 base score, v2 4.3
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://us-cert.cisa.gov/ics/advisories/icsa-20-191-02 Third Party AdvisoryUS Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-191-02 Third Party AdvisoryUS Government Resource

Track CVE-2020-12025 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-22681Rockwell Logix Designer authentication bypass via weak key verificationRockwell Automation Studio 5000 Logix Designer (v21+) and RSLogix 5000 (v16-20) rely on a key to verify that Logix controllers are talking to genuine…KEVEPSS 64%analysed8.2CVE-2020-12034Rockwellautomation eds subsystem sql injection vulnerabilityProducts that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and …EPSS 1.3%7.3CVE-2026-9127Rockwellautomation studio 5000 logix designer incorrect authorization vulnerabilityA remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can all…EPSS 0.15%7.3CVE-2026-9128Rockwellautomation studio 5000 logix designer unquoted search path vulnerabilityA code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The exe…EPSS 0.17%5.5CVE-2020-12038Rockwellautomation eds subsystem memory buffer overflow vulnerabilityProducts that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and …EPSS 2.5%5.4CVE-2026-9108Rockwellautomation studio 5000 logix designer path traversal vulnerabilityA path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The soft…EPSS 0.18%9.8CVE-2025-58360GeoServer WMS GetMap XXE allows unauthenticated file read and SSRFGeoServer versions 2.26.0 through 2.26.2 and before 2.25.6 accept XML input at the /geoserver/wms GetMap endpoint without sufficiently restricting ex…KEVEPSS 61%analysed9.8CVE-2025-2776SysAid On-Prem unauthenticated XXE in Server URL processingSysAid On-Prem versions up to 23.3.40 process the Server URL without restricting XML external entities, so an unauthenticated attacker can supply cra…KEVEPSS 64%analysed

Source: NIST National Vulnerability Database (record CVE-2020-12025), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.