Description
A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version
4.4.1.19. The vulnerability allows an attacker who can tamper with a productivity project to execute arbitrary code on the machine where the project is opened.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AutomationDirect | Productivity Suite | ≤ SW V4.2.1.9 | — |
| AutomationDirect | Productivity 3000 P3-622 CPU | ≤ SW V4.2.1.9 | — |
| AutomationDirect | Productivity 3000 P3-550E CPU | ≤ SW V4.2.1.9 | — |
| AutomationDirect | Productivity 3000 P3-530 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 2000 P2-622 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 2000 P2-550 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 1000 P1-550 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 1000 P1-540 CPU | < SW v4.4.1.19 | SW v4.4.1.19 |
Advisories 1
- ICSA-25-296-01 AutomationDirect Productivity Suite CISA ICS & IT advisories · Oct 23, 2025