Out-of-Bounds Write Vulnerability in Productivity Suite by AutomationDirect
CVE-2026-60063

7.3HIGH

Key Information:

Vendor

Automationdirect

Status
Productivity Suite
Vendor
CVE Published:
16 July 2026

What is CVE-2026-60063?

An out-of-bounds write vulnerability exists in AutomationDirect's Productivity Suite, posing risks of kernel memory corruption. A local attacker could exploit this flaw by sending a specially crafted IOCTL request, leading to potential privilege escalation and system instability. Administrators should review and apply available patches to mitigate the risk associated with this vulnerability.

Affected Version(s)

Productivity Suite 0

Productivity Suite v4.7.0.47

References

https://www.automationdirect.com/support/software-downloads
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luca Borzacchiello of Nozomi Networks reported this vulnerability to CISA.
.