Out-of-Bounds Read Vulnerability in AutomationDirect Productivity Suite
CVE-2026-60140

6.9MEDIUM

Key Information:

Vendor

Automationdirect

Status
Productivity Suite
Vendor
CVE Published:
16 July 2026

What is CVE-2026-60140?

An out-of-bounds read vulnerability exists in AutomationDirect's Productivity Suite, enabling local attackers to exploit the system by sending specially crafted IOCTL requests. This may lead to kernel memory corruption, resulting in sensitive information exposure and instability or unavailability of the affected product. Organizations utilizing the Productivity Suite should take immediate action to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Productivity Suite 0

Productivity Suite v4.7.0.47

References

https://www.automationdirect.com/support/software-downloads
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luca Borzacchiello of Nozomi Networks reported this vulnerability to CISA.
.