CVEvulnerability
CVE-2025-61934
9.3 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2025-10-23
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 9.3 CRITICAL — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-1327
Description
A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine
Related
Weakness · CWE (1)
- CWE-1327 Binding to an Unrestricted IP Address weakness
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json github.com
- https://support.automationdirect.com/docs/securityconsiderations.pdf support.automationdirect.com
- https://www.automationdirect.com/support/software-downloads www.automationdirect.com
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 www.cisa.gov