---
id: CVE-2019-25276
title: >-
  Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service'
  Unquoted Service Path
summary: >-
  Studio 5000 Logix Designer 30.01.00 contains an unquoted service path
  vulnerability in the FactoryTalk Activation Service that allows local users to
  potentially execute code with elevated privileges. Attackers can exploit the
  unquoted pa…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-428
vendor: Rockwellautomation
product: Studio
affected:
  - Studio 5000
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-02-05T17:24:42.525254Z'
exploitAvailable: true
published: '2026-02-04'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T00:54:08.567Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2019-25276'
references:
  - url: 'https://www.exploit-db.com/exploits/47676'
    label: ExploitDB-47676
  - url: 'https://www.rockwellautomation.com/en_NA/overview.page'
    label: Rockwell Automation Homepage
  - url: >-
      https://www.vulncheck.com/advisories/studio-logix-designer-factorytalk-activation-service-unquoted-service-path
    label: >-
      VulnCheck Advisory: Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk
      Activation Service' Unquoted Service Path
tags:
  - cve.org
  - exploit-available
epss: 0.00214
epssPercentile: 0.11635
ingestedAt: '2026-10-27T16:11:59.194Z'
---

## Overview

Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\ to inject malicious code that would execute with LocalSystem permissions.

## Affected

- `Studio 5000`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.