CVE-2025-62498

High CVSS: 8.6

A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version

4.4.1.19. The vulnerability allows an attacker who can tamper with a productivity project to execute arbitrary code on the machine where the project is opened.

Vendor

Product

CWE

CWE-23

Yayın Tarihi

2025-10-23 22:15:49

Güncelleme

2025-10-27 13:20:15

Source Identifier

ics-cert@hq.dhs.gov

KEV Date Added

Kategoriler

CWE-23 HIGH 2025

Referanslar

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json https://www.automationdirect.com/support/software-downloads https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01