CVEvulnerability
CVE-2025-59776
6.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2025-10-23
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 6.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 4.0 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
- Weaknesses
- CWE-23
Description
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.
Related
Weakness · CWE (1)
- CWE-23 Relative Path Traversal weakness
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json github.com
- https://support.automationdirect.com/docs/securityconsiderations.pdf support.automationdirect.com
- https://www.automationdirect.com/support/software-downloads www.automationdirect.com
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 www.cisa.gov