← Retour aux CVEs

CVE-2025-61934

CRITICAL

10.0

Description

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

Details CVE

Score CVSS v3.110.0

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie10/23/2025

Derniere modification10/27/2025

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-1327

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json(ics-cert@hq.dhs.gov)

https://support.automationdirect.com/docs/securityconsiderations.pdf(ics-cert@hq.dhs.gov)

https://www.automationdirect.com/support/software-downloads(ics-cert@hq.dhs.gov)

https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01(ics-cert@hq.dhs.gov)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.