Out-of-Bounds Write Vulnerability in Productivity Suite by Automation Direct
CVE-2026-61389

7.3HIGH

Key Information:

Vendor

Automationdirect

Status
Productivity Suite
Vendor
CVE Published:
16 July 2026

What is CVE-2026-61389?

An out-of-bounds write vulnerability within Automation Direct's Productivity Suite allows local attackers to exploit crafted IOCTL requests. This manipulation may lead to kernel memory corruption, potentially resulting in privilege escalation and instability within the system. Immediate updates and patches should be applied to mitigate risks associated with this issue.

Affected Version(s)

Productivity Suite 0

Productivity Suite v4.7.0.47

References

https://www.automationdirect.com/support/software-downloads
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luca Borzacchiello of Nozomi Networks reported this vulnerability to CISA.
.