Riskcovery

CVE-2025-61977

AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password

State
Published
Severity
7.3 High
Published
Oct 23, 2025
Updated
Oct 24, 2025
Reserved
Oct 21, 2025

Read the record on cve.org

Description

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question.

Scores

CVSSScoreVectorSource
4.07.3 HighCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nicscert
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hicscert

Weaknesses

Affected Products

ProductVersions
Productivity SuiteAutomationDirect
  • SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-622 CPUAutomationDirect
  • SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-550E CPUAutomationDirect
  • SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-530 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 2000 P2-622 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 2000 P2-550 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 1000 P1-550 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 1000 P1-540 CPUAutomationDirect
  • before SW v4.4.1.19Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.