CVE-2025-61934

published 2025-10-23

CVE-2025-61934: A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an…

Priority P2 69 critical 10 CVSS 3.1

AV N AC L PR N UI N S C C H I H A H

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

Affected

8 ranges

Vendor	Product	Version range	Fixed in
automationdirect	productivity_1000_p1-540_cpu	< SW v4.4.1.19	SW v4.4.1.19
automationdirect	productivity_1000_p1-550_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_2000_p2-550_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_2000_p2-622_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_3000_p3-530_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_3000_p3-550e_cpu	<= SW V4.2.1.9	—
automationdirect	productivity_3000_p3-622_cpu	<= SW V4.2.1.9	—
automationdirect	productivity_suite	<= SW V4.2.1.9	—

CVSS provenance

nvd v3.1 10.0 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

nvd v4.0 9.3 CRITICAL CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-1327