CVE-2025-58429CWE-23

CVE-2025-58429

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

🚨 An unauthenticated remote attacker can erase any file on your machine with a clever path traversal trick! 🔥 Think of it like a delivery person who can access every room in a hotel just because they know a few secret shortcuts — they could end up throwing away important documents or even the guest’s valuables if nobody checks their IDs! This vulnerability could lead to absolute chaos, allowing an attacker to delete crucial files from your Productivity Suite installation. Imagine losing vital configurations or data unexpectedly, which could cripple your business operations. It's a high-severity issue that demands immediate attention!

Put simply

Think of it like a delivery person who can access every room in a hotel just because they know a few secret shortcuts — they could end up throwing away important documents or even the guest’s valuables if nobody checks their IDs! The relative path traversal vulnerability in Productivity Suite version 4.4.1.19 lets unauthenticated attackers manipulate file paths to delete arbitrary files on the server running the ProductivityService PLC simulator, bypassing standard security measures.

What to do

This vulnerability could lead to absolute chaos, allowing an attacker to delete crucial files from your Productivity Suite installation. Imagine losing vital configurations or data unexpectedly, which could cripple your business operations. It's a high-severity issue that demands immediate attention! To safeguard against this threat, patch to version 4.4.1.20 or later as soon as possible. Additionally, ensure that proper access controls are enforced and monitor your system for any unauthorized file activities. You've got this! Follow these steps to lock down your system, and you'll be well on your way to maintaining a secure environment. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.8th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2025-10-24T03:15Z
References (4)
EPSS history
Timeline
  • 23 OCT 22:12Z
    AutomationDirect Productivity Suite Relative Path Traversal
    cvelistv5