{"id":"CVE-2025-62688","state":"PUBLISHED","title":"AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource","description":"An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project.","publishedAt":"2025-10-23T21:58:16.532Z","updatedAt":"2025-10-24T14:32:15.375Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:L/SI:L/SA:L","source":"icscert"},"assigner":"icscert","products":["AutomationDirect Productivity Suite","AutomationDirect Productivity 3000 P3-622 CPU","AutomationDirect Productivity 3000 P3-550E CPU","AutomationDirect Productivity 3000 P3-530 CPU","AutomationDirect Productivity 2000 P2-622 CPU","AutomationDirect Productivity 2000 P2-550 CPU","AutomationDirect Productivity 1000 P1-550 CPU","AutomationDirect Productivity 1000 P1-540 CPU"],"affected":[{"vendor":"AutomationDirect","product":"Productivity Suite","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-550E CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-530 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-540 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"SW v4.4.1.19","versionType":"custom"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01","https://www.automationdirect.com/support/software-downloads","https://support.automationdirect.com/docs/securityconsiderations.pdf","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"],"weaknesses":["CWE-732"],"ingestedAt":"2026-10-29T20:09:48.677Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/62xxx/CVE-2025-62688.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-62688","state":"PUBLISHED","datePublished":"2025-10-23T21:58:16.532Z","dateUpdated":"2025-10-24T14:32:15.375Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2025-10-21T21:55:11.842Z"},"containers":{"cna":{"title":"AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource","descriptions":[{"lang":"en","value":"An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project."}],"affected":[{"vendor":"AutomationDirect","product":"Productivity Suite","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-550E CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW V4.2.1.9","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 3000 P3-530 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-622 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 2000 P2-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-550 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"SW v4.4.1.19","versionType":"custom"}]},{"vendor":"AutomationDirect","product":"Productivity 1000 P1-540 CPU","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"SW v4.4.1.19","versionType":"custom"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01"},{"url":"https://www.automationdirect.com/support/software-downloads"},{"url":"https://support.automationdirect.com/docs/securityconsiderations.pdf"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.9,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:L/SI:L/SA:L","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-732","description":"CWE-732","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2025-10-23T21:58:16.532Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.2.1.9","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_3000_p3-622_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.2.1.9","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_3000_p3-550e_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.2.1.9","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_3000_p3-530_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_2000_p2-622_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_2000_p2-550_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_1000_p1-550_cpu:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:automationdirect:productivity_1000_p1-540_cpu:*:*:*:*:*:*:*:*","versionEndExcluding":"sw_v4.4.1.19","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Luca Borzacchiello of Nozomi Networks reported these vulnerabilities to AutomationDirect."}],"datePublic":"2025-10-23T16:00:00.000Z","solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>AutomationDirect recommends that users do the following:</p><ul><li>Update the Productivity Suite programming software to version 4.5.0.x or higher.</li><li>Update the firmware of Productivity PLCs to the latest version. <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.automationdirect.com/support/software-downloads\">https://www.automationdirect.com/support/software-downloads</a></li><li>Although automation networks and systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems.</li><li>It is imperative that automation control system networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems.</li><li>AutomationDirect advises users of PLCs, HMI products, and SCADA systems to conduct a thorough network security analysis to ascertain the appropriate level of security necessary for their specific application.</li></ul>\n\n<br>"}],"value":"AutomationDirect recommends that users do the following:\n\n  *  Update the Productivity Suite programming software to version 4.5.0.x or higher.\n  *  Update the firmware of Productivity PLCs to the latest version.  https://www.automationdirect.com/support/software-downloads \n  *  Although automation networks and systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems.\n  *  It is imperative that automation control system networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems.\n  *  AutomationDirect advises users of PLCs, HMI products, and SCADA systems to conduct a thorough network security analysis to ascertain the appropriate level of security necessary for their specific application."}],"source":{"advisory":"ICSA-25-296-01","discovery":"EXTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>AutomationDirect has identified the following mitigations for instances where systems cannot be upgraded to the latest version:</p><ul><li>Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems.</li><li>Configure network segmentation to isolate the PLC from other devices and systems within the organization.</li><li>Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC.</li><li>Please refer to <a target=\"_blank\" rel=\"nofollow\" href=\"https://support.automationdirect.com/docs/securityconsiderations.pdf\">AutomationDirect's security considerations</a>&nbsp;for additional information.</li><li>If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance.</li></ul>\n\n<br>"}],"value":"AutomationDirect has identified the following mitigations for instances where systems cannot be upgraded to the latest version:\n\n  *  Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems.\n  *  Configure network segmentation to isolate the PLC from other devices and systems within the organization.\n  *  Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC.\n  *  Please refer to  AutomationDirect's security considerations https://support.automationdirect.com/docs/securityconsiderations.pdf  for additional information.\n  *  If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance."}],"x_generator":{"engine":"Vulnogram 0.4.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-24T14:32:07.318424Z","id":"CVE-2025-62688","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-24T14:32:15.375Z"}}]}}}