CVE-2025-61977

High CVSS: 7.3

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question.

Vendor

Product

CWE

CWE-640

Yayın Tarihi

2025-10-23 22:15:48

Güncelleme

2025-10-27 13:20:15

Source Identifier

ics-cert@hq.dhs.gov

KEV Date Added

Kategoriler

CWE-640 HIGH 2025

Referanslar

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json https://support.automationdirect.com/docs/securityconsiderations.pdf https://www.automationdirect.com/support/software-downloads https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01