Description
An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AutomationDirect | Productivity Suite | ≤ SW V4.2.1.9 | — |
| AutomationDirect | Productivity 3000 P3-622 CPU | ≤ SW V4.2.1.9 | — |
| AutomationDirect | Productivity 3000 P3-550E CPU | ≤ SW V4.2.1.9 | — |
| AutomationDirect | Productivity 3000 P3-530 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 2000 P2-622 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 2000 P2-550 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 1000 P1-550 CPU | ≤ SW v4.4.1.19 | — |
| AutomationDirect | Productivity 1000 P1-540 CPU | < SW v4.4.1.19 | SW v4.4.1.19 |
Advisories 1
- ICSA-25-296-01 AutomationDirect Productivity Suite CISA ICS & IT advisories · Oct 23, 2025