← Zuruck zu CVEs

CVE-2025-61934

CRITICAL

10.0

Beschreibung

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

CVE Details

CVSS v3.1 Bewertung10.0

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht10/23/2025

Zuletzt geandert10/27/2025

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-1327

Referenzen

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json(ics-cert@hq.dhs.gov)

https://support.automationdirect.com/docs/securityconsiderations.pdf(ics-cert@hq.dhs.gov)

https://www.automationdirect.com/support/software-downloads(ics-cert@hq.dhs.gov)

https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01(ics-cert@hq.dhs.gov)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.