*Rockwell Automation AADvance-Trusted SIS Workstation *

An attacker could execute arbitrary code on the AADvance-Trusted SIS Workstation with user interaction, potentially altering critical safety instrumented system logic or safety interlock configurations on the connected process.

This affects SIS (Safety Instrumented System) engineers and operators at any facility using AADvance-Trusted SIS Workstations for configuration and monitoring of safety critical equipment. Typical users include chemical plants, refineries, power plants, and any process industry relying on safety interlocks and emergency shutdown systems.

An attacker crafts a malicious file (likely exploiting a path traversal or file inclusion flaw per CWE-22) and tricks a workstation user into opening it. Once opened, the file executes code in the context of the workstation, giving the attacker control over the SIS engineering and configuration environment.