AutomationDirect Productivity Suite Relative Path Traversal
Priority LOW 37CWE-23Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-23 and the CVSS impact.
Summary
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read arbitrary files on the target machine.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00621 50th percentileScored 2026-11-07
Fix Fixed Productivity 1000 P1-540 CPU (AutomationDirect): SW v4.4.1.19
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AutomationDirect | Productivity Suite | up to SW V4.2.1.9 | — | No fix listed | CNA |
| AutomationDirect | Productivity 3000 P3-622 CPU | up to SW V4.2.1.9 | — | No fix listed | CNA |
| AutomationDirect | Productivity 3000 P3-550E CPU | up to SW V4.2.1.9 | — | No fix listed | CNA |
| AutomationDirect | Productivity 3000 P3-530 CPU | up to SW v4.4.1.19 | — | No fix listed | CNA |
| AutomationDirect | Productivity 2000 P2-622 CPU | up to SW v4.4.1.19 | — | No fix listed | CNA |
| AutomationDirect | Productivity 2000 P2-550 CPU | up to SW v4.4.1.19 | — | No fix listed | CNA |
| AutomationDirect | Productivity 1000 P1-550 CPU | up to SW v4.4.1.19 | — | No fix listed | CNA |
| AutomationDirect | Productivity 1000 P1-540 CPU | before SW v4.4.1.19 | SW v4.4.1.19 | Patch available | CNA |
- Productivity Suite VendorAutomationDirect Affected up to SW V4.2.1.9 Fixed in — No fix listed CNA
- Productivity 3000 P3-622 CPU VendorAutomationDirect Affected up to SW V4.2.1.9 Fixed in — No fix listed CNA
- Productivity 3000 P3-550E CPU VendorAutomationDirect Affected up to SW V4.2.1.9 Fixed in — No fix listed CNA
- Productivity 3000 P3-530 CPU VendorAutomationDirect Affected up to SW v4.4.1.19 Fixed in — No fix listed CNA
- Productivity 2000 P2-622 CPU VendorAutomationDirect Affected up to SW v4.4.1.19 Fixed in — No fix listed CNA
- Productivity 2000 P2-550 CPU VendorAutomationDirect Affected up to SW v4.4.1.19 Fixed in — No fix listed CNA
- Productivity 1000 P1-550 CPU VendorAutomationDirect Affected up to SW v4.4.1.19 Fixed in — No fix listed CNA
- Productivity 1000 P1-540 CPU VendorAutomationDirect Affected before SW v4.4.1.19 Fixed in SW v4.4.1.19 Patch available CNA
Remediation
- Fix · CNA Productivity 1000 P1-540 CPU (AutomationDirect) Fixed in SW v4.4.1.19
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
AutomationDirect Productivity 1000 P1-540 CPU SW v4.4.1.19
9 records Highest priority Priority MEDIUM 2 MEDIUM, 7 LOW
Other records, highest priority first
- TI-2025-38283 AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327Priority MEDIUM 49
- TI-2025-38740 AutomationDirect Productivity Suite Relative Path TraversalPriority MEDIUM 40
- TI-2025-36189 AutomationDirect Productivity Suite Relative Path TraversalPriority LOW 37
Timeline
- 2026-10-02 Threatist record created from CVE-2025-58456
- 2026-10-03 Alias added: GHSA-7xp6-cgj4-vvc8
- 2026-11-07 EPSS moved to the 50th–90th percentile
References
More AutomationDirect vulnerabilities
- TI-2024-14467 A leftover debug code vulnerability exists in the Telnet Diagnostic Interface… CVSS 3.1CRITICAL 9.8
- TI-2024-14780 Improper access control in AutomationDirect P3-550E CVSS 3.1CRITICAL 9.1
- TI-2025-24868 AutomationDirect MB-Gateway Missing Authentication for Critical Function CVSS 4.0CRITICAL 10.0
- TI-2024-16461 Stack-based buffer overflow in AutomationDirect P3-550E CVSS 3.1CRITICAL 9.8
- TI-2024-16460 Stack-based buffer overflow in AutomationDirect P3-550E CVSS 3.1CRITICAL 9.8
- TI-2021-12594 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-58456 · CVE Program
- CVE-2025-58456 · NVD
- FIRST EPSS
- GHSA-7xp6-cgj4-vvc8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences