CVE-2025-61934

CRITICAL

AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-61934 has a selected CVSS score of 9.3 (critical).

Description

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 24, 2025 · Source: CVE List

Affected products and versions

8
ProductSourceVersion range

Productivity 1000 P1-540 CPU

Browse AutomationDirect / Productivity 1000 P1-540 CPU

Default status: unaffected

CVE ListBefore SW v4.4.1.19affected

Productivity 1000 P1-550 CPU

Browse AutomationDirect / Productivity 1000 P1-550 CPU

Default status: unaffected

CVE ListThrough SW v4.4.1.19affected

Productivity 2000 P2-550 CPU

Browse AutomationDirect / Productivity 2000 P2-550 CPU

Default status: unaffected

CVE ListThrough SW v4.4.1.19affected

Productivity 2000 P2-622 CPU

Browse AutomationDirect / Productivity 2000 P2-622 CPU

Default status: unaffected

CVE ListThrough SW v4.4.1.19affected

Productivity 3000 P3-530 CPU

Browse AutomationDirect / Productivity 3000 P3-530 CPU

Default status: unaffected

CVE ListThrough SW v4.4.1.19affected

Productivity 3000 P3-550E CPU

Browse AutomationDirect / Productivity 3000 P3-550E CPU

Default status: unaffected

CVE ListThrough SW V4.2.1.9affected

Productivity 3000 P3-622 CPU

Browse AutomationDirect / Productivity 3000 P3-622 CPU

Default status: unaffected

CVE ListThrough SW V4.2.1.9affected

Productivity Suite

Browse AutomationDirect / Productivity Suite

Default status: unaffected

CVE ListThrough SW V4.2.1.9affected

References

5