CVE-2025-58429

AutomationDirect Productivity Suite Relative Path Traversal

State: Published
Severity: 8.3 High
Published: Oct 23, 2025
Updated: Oct 24, 2025
Reserved: Oct 21, 2025

Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.

Scores

CVSS	Score	Vector	Source
4.0	8.3 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L	icscert
3.1	7.5 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H	icscert

Weaknesses

CWE-23

Affected Products

Product	Versions
Productivity SuiteAutomationDirect	SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-622 CPUAutomationDirect	SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-550E CPUAutomationDirect	SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-530 CPUAutomationDirect	SW v4.4.1.19 and earlierAffected
Productivity 2000 P2-622 CPUAutomationDirect	SW v4.4.1.19 and earlierAffected
Productivity 2000 P2-550 CPUAutomationDirect	SW v4.4.1.19 and earlierAffected
Productivity 1000 P1-550 CPUAutomationDirect	SW v4.4.1.19 and earlierAffected
Productivity 1000 P1-540 CPUAutomationDirect	before SW v4.4.1.19Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.