Out-of-Bounds Read Vulnerability in Productivity Suite by AutomationDirect
CVE-2026-60073

5.2MEDIUM

Key Information:

Vendor

Automationdirect

Status
Productivity Suite
Vendor
CVE Published:
16 July 2026

What is CVE-2026-60073?

The Productivity Suite by AutomationDirect is susceptible to an out-of-bounds read vulnerability, which allows a physical attacker to manipulate the size of the data sent to connected USB devices. This flaw may lead to unauthorized access to sensitive data in kernel memory or cause instability by crashing the system. It is crucial for users of the Productivity Suite to apply security patches and implement mitigative measures to protect against potential exploitation.

Affected Version(s)

Productivity Suite 0

Productivity Suite v4.7.0.47

References

https://www.automationdirect.com/support/software-downloads
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
5.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luca Borzacchiello of Nozomi Networks reported this vulnerability to CISA.
.