This vulnerability (CWE-125) involves an out-of-bounds read in the Productivity Suite software by AutomationDirect. It can be exploited locally by an attacker with low privileges through a specially crafted IOCTL request, leading to kernel memory corruption. The impact includes potential exposure of sensitive information and denial of service due to instability or unavailability of the affected product. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, limited confidentiality impact, no integrity impact, and high availability impact. No vendor advisory or patch information is currently available.

Successful exploitation can lead to kernel memory corruption, which may expose sensitive information and cause the affected product to become unstable or unavailable, resulting in denial of service conditions. The confidentiality impact is limited, integrity is not affected, but availability impact is high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only to reduce the risk of exploitation.