← Back to CVEs

CVE-2025-61934

CRITICAL

10.0

Description

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

CVE Details

CVSS v3.1 Score10.0

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/23/2025

Last Modified10/27/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-1327

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json(ics-cert@hq.dhs.gov)

https://support.automationdirect.com/docs/securityconsiderations.pdf(ics-cert@hq.dhs.gov)

https://www.automationdirect.com/support/software-downloads(ics-cert@hq.dhs.gov)

https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01(ics-cert@hq.dhs.gov)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.