Approved changes feed: RSS · Atom

cpe:2.3:a:automationdirect:productivity_3000_p3-622_cpu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutomationdirect (5dd60aaf-eea3-5732-9a9c-5b671c0ed914)
ProductProductivity 3000 P3 622 Cpu (bdb80872-61d5-5c99-a1e8-bc94e56c70f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62688 vulnerable 2026-06-08 07:39:16.463396 AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource
HIGH (7.1)
An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project.
Published: 2025-10-23T21:58:16.532Z
Updated: 2025-10-24T14:32:15.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62498 vulnerable 2026-06-08 07:37:29.859078 AutomationDirect Productivity Suite Relative Path Traversal
HIGH (8.8)
A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker who can tamper with a productivity project to execute arbitrary code on the machine where the project is opened.
Published: 2025-10-23T21:46:45.360Z
Updated: 2025-10-24T14:34:34.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61977 vulnerable 2026-06-08 07:37:28.492006 AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password
HIGH (7)
A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question.
Published: 2025-10-23T21:51:56.523Z
Updated: 2025-10-24T14:34:02.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61934 vulnerable 2026-06-08 07:37:28.373119 AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327
CRITICAL (10)
A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine
Published: 2025-10-23T22:01:28.290Z
Updated: 2025-10-24T14:31:43.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60023 vulnerable 2026-06-08 07:37:26.497402 AutomationDirect Productivity Suite Relative Path Traversal
MEDIUM (4)
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.
Published: 2025-10-23T22:21:05.084Z
Updated: 2025-10-24T14:27:12.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59776 vulnerable 2026-06-08 07:35:23.069160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58456 vulnerable 2026-06-08 07:35:18.303266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58429 vulnerable 2026-06-08 07:35:18.262077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58078 vulnerable 2026-06-08 07:35:17.124849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.