CVE-2025-58078
High
Description
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and write files with arbitrary data on the target machine.
SeverityHigh
CVSS7.5
Exploit probability—
ProductProductivity Suite
PublishedOct 23, 2025
First seenOct 23, 2025
Weakness typeCWE-23CWE-23
How to fix
Update
- AutomationDirect Productivity 1000 P1-540 CPUSW v4.4.1.19 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| AutomationDirect Productivity Suite | v ≤ SW V4.2.1.9 | — |
| AutomationDirect Productivity 3000 P3-622 CPU | v ≤ SW V4.2.1.9 | — |
| AutomationDirect Productivity 3000 P3-550E CPU | v ≤ SW V4.2.1.9 | — |
| AutomationDirect Productivity 3000 P3-530 CPU | v ≤ SW v4.4.1.19 | — |
| AutomationDirect Productivity 2000 P2-622 CPU | v ≤ SW v4.4.1.19 | — |
| AutomationDirect Productivity 2000 P2-550 CPU | v ≤ SW v4.4.1.19 | — |
| AutomationDirect Productivity 1000 P1-550 CPU | v ≤ SW v4.4.1.19 | — |
| AutomationDirect Productivity 1000 P1-540 CPU | v < SW v4.4.1.19 | SW v4.4.1.19 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.