{"id":"CVE-2025-62498","state":"PUBLISHED","title":"AutomationDirect Productivity Suite Relative Path Traversal","description":"A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version \n\n4.4.1.19. The vulnerability allows an attacker who can tamper with a productivity project to execute arbitrary code on the machine where the project is opened.","publishedAt":"2025-10-23T21:46:45.360Z","updatedAt":"2025-10-24T14:34:34.818Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"icscert"},"assigner":"icscert","products":["AutomationDirect Productivity Suite","AutomationDirect Productivity 3000 P3-622 CPU","AutomationDirect Productivity 3000 P3-550E CPU","AutomationDirect Productivity 3000 P3-530 CPU","AutomationDirect Productivity 2000 P2-622 CPU","AutomationDirect Productivity 2000 P2-550 CPU","AutomationDirect Productivity 1000 P1-550 CPU","AutomationDirect Productivity 1000 P1-540 CPU"],"affected":[{"vendor":"AutomationDirect","product":"Productivity Suite","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-550E CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-530 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-540 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"SW v4.4.1.19","versionType":"custom"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01","https://www.automationdirect.com/support/software-downloads","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"],"weaknesses":["CWE-23"],"ingestedAt":"2026-10-29T20:09:48.677Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/62xxx/CVE-2025-62498.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-62498","state":"PUBLISHED","datePublished":"2025-10-23T21:46:45.360Z","dateUpdated":"2025-10-24T14:34:34.818Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2025-10-21T21:55:11.793Z"},"containers":{"cna":{"title":"AutomationDirect Productivity Suite Relative Path Traversal","descriptions":[{"lang":"en","value":"A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version \n\n4.4.1.19. The vulnerability allows an attacker who can tamper with a productivity project to execute arbitrary code on the machine where the project is opened."}],"affected":[{"vendor":"AutomationDirect","product":"Productivity Suite","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-550E CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-530 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-540 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"SW v4.4.1.19","versionType":"custom"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01"},{"url":"https://www.automationdirect.com/support/software-downloads"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.6,"baseSeverity":"HIGH","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-23","description":"CWE-23","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2025-10-23T21:46:45.360Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.2.1.9","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_3000_p3-622_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.2.1.9","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_3000_p3-550e_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.2.1.9","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_3000_p3-530_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_2000_p2-622_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_2000_p2-550_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_1000_p1-550_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_1000_p1-540_cpu:*:*:*:*:*:*:*:*","versionEndExcluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Luca Borzacchiello of Nozomi Networks reported these vulnerabilities to AutomationDirect."}],"datePublic":"2025-10-23T16:00:00.000Z","solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

AutomationDirect recommends that users do the following:

\n\n
"}],"value":"AutomationDirect recommends that users do the following:\n\n * Update the Productivity Suite programming software to version 4.5.0.x or higher.\n * Update the firmware of Productivity PLCs to the latest version. https://www.automationdirect.com/support/software-downloads \n * Although automation networks and systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems.\n * It is imperative that automation control system networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems.\n * AutomationDirect advises users of PLCs, HMI products, and SCADA systems to conduct a thorough network security analysis to ascertain the appropriate level of security necessary for their specific application."}],"source":{"advisory":"ICSA-25-296-01","discovery":"EXTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

AutomationDirect has identified the following mitigations for instances where systems cannot be upgraded to the latest version:

\n\n
"}],"value":"AutomationDirect has identified the following mitigations for instances where systems cannot be upgraded to the latest version:\n\n * Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems.\n * Configure network segmentation to isolate the PLC from other devices and systems within the organization.\n * Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC.\n * Please refer to AutomationDirect's security considerations https://support.automationdirect.com/docs/securityconsiderations.pdf  for additional information.\n * If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance."}],"x_generator":{"engine":"Vulnogram 0.4.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-24T14:34:28.270545Z","id":"CVE-2025-62498","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-24T14:34:34.818Z"}}]}}}