CVE-2025-62688

Description

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 ↗
• https://www.automationdirect.com/support/software-downloads ↗
• https://support.automationdirect.com/docs/securityconsiderations.pdf ↗
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json ↗