Relative Path Traversal Vulnerability in Productivity Suite by AutomationDirect

CVE-2025-58078

What is CVE-2025-58078?

A relative path traversal vulnerability has been identified in AutomationDirect's Productivity Suite software, specifically in version 4.4.1.19. This security flaw allows unauthenticated remote attackers to interact with the ProductivityService PLC simulator. Exploitation of this vulnerability enables malicious users to write files with arbitrary data onto the affected system, potentially leading to further compromise of the machine. Users of the affected version are urged to apply recommended security measures and updates as outlined by AutomationDirect to mitigate the risk associated with this vulnerability.

References