Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 15

Export CSV
CVE-2026-61389

AutomationDirect Productivity Suite Out-of-bounds Write

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-60140

AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exposing sensitive information or causing the affected product to become unstable or unavailable.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-60063

AutomationDirect Productivity Suite Out-of-bounds Write

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-61378

AutomationDirect Productivity Suite Divide By Zero

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-57896

AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-60073

AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of kernel memory.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2025-61977

AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-58078

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and write files with arbitrary data on the target machine.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-62688

AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-62498

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker who can tamper with a productivity project to execute arbitrary code on the machine where the project is opened.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-58429

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-58456

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read arbitrary files on the target machine.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-59776

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-60023

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-61934

AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more