CVE-2025-61977

published 2025-10-23

CVE-2025-61977: A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability…

Priority P3 34 high 7 CVSS 3.1

AV L AC H PR L UI N S U C H I H A H

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
automationdirect	productivity_1000_p1-540_cpu	< SW v4.4.1.19	SW v4.4.1.19
automationdirect	productivity_1000_p1-550_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_2000_p2-550_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_2000_p2-622_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_3000_p3-530_cpu	<= SW v4.4.1.19	—
automationdirect	productivity_3000_p3-550e_cpu	<= SW V4.2.1.9	—
automationdirect	productivity_3000_p3-622_cpu	<= SW V4.2.1.9	—
automationdirect	productivity_suite	<= SW V4.2.1.9	—

CVSS provenance

nvd v3.1 7.0 HIGH CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 7.3 HIGH CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-640