Riskcovery

CVE-2025-62688

AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource

State
Published
Severity
6.9 Medium
Published
Oct 23, 2025
Updated
Oct 24, 2025
Reserved
Oct 21, 2025

Read the record on cve.org

Description

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project.

Scores

CVSSScoreVectorSource
4.06.9 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:L/SI:L/SA:Licscert
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Hicscert

Weaknesses

Affected Products

ProductVersions
Productivity SuiteAutomationDirect
  • SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-622 CPUAutomationDirect
  • SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-550E CPUAutomationDirect
  • SW V4.2.1.9 and earlierAffected
Productivity 3000 P3-530 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 2000 P2-622 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 2000 P2-550 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 1000 P1-550 CPUAutomationDirect
  • SW v4.4.1.19 and earlierAffected
Productivity 1000 P1-540 CPUAutomationDirect
  • before SW v4.4.1.19Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.