CVE-2025-61934

Critical CVSS: 9.3

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

Vendor

Product

CWE

CWE-1327

Yayın Tarihi

2025-10-23 22:15:48

Güncelleme

2025-10-27 13:20:15

Source Identifier

ics-cert@hq.dhs.gov

KEV Date Added

Kategoriler

CWE-1327 CRITICAL 2025

Referanslar

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json https://support.automationdirect.com/docs/securityconsiderations.pdf https://www.automationdirect.com/support/software-downloads https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01