CVE-2025-60023CWE-23

CVE-2025-60023

Medium · published October 24, 2025

CVSS v3.1
4.0
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.7th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2025-10-24T03:15Z
References (4)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json · [email protected]https://support.automationdirect.com/docs/securityconsiderations.pdf · [email protected]https://www.automationdirect.com/support/software-downloads · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 · [email protected]
EPSS history
Timeline
  • 23 OCT 22:21Z
    AutomationDirect Productivity Suite Relative Path Traversal
    cvelistv5