CVE-2026-61378 is a divide-by-zero vulnerability in AutomationDirect's Productivity Suite. This flaw allows a local attacker to cause a division by zero, resulting in a system crash. The vulnerability does not impact confidentiality or integrity but causes a denial of service. No patch or official remediation has been confirmed yet. The vulnerability has a medium severity rating with a CVSS score of 5.5.
CVE-2026-60073 is an out-of-bounds read vulnerability in AutomationDirect's Productivity Suite. It allows a physical attacker to manipulate the length of data sent to a USB device, potentially causing a system crash or kernel memory disclosure. The vulnerability has a medium severity with a CVSS score of 5.9. No affected versions or patches are specified in the available data.
CVE-2026-57896 is an out-of-bounds read vulnerability in AutomationDirect's Productivity Suite. A local attacker with low privileges can send a crafted IOCTL request to trigger kernel memory corruption. This vulnerability may result in limited information disclosure or disruption of the affected product. No specific affected versions or patches have been identified yet. The vulnerability has a medium severity rating with a CVSS score of 6.1.
CVE-2026-60140 is an out-of-bounds read vulnerability in AutomationDirect's Productivity Suite. A local attacker with low privileges can send a crafted IOCTL request that triggers kernel memory corruption. This may expose sensitive information or cause the product to become unstable or unavailable. The vulnerability has a CVSS score of 6.1, indicating medium severity. No patch or official remediation guidance has been provided yet.
CVE-2026-61389 is an out-of-bounds write vulnerability in AutomationDirect's Productivity Suite. It allows a local attacker to cause kernel memory corruption by sending a crafted IOCTL request. This vulnerability can lead to privilege escalation or system instability. The vulnerability has a high severity with a CVSS score of 7. No affected versions or patch information are currently provided.
CVE-2026-60063 is an out-of-bounds write vulnerability in AutomationDirect's Productivity Suite. It allows a local attacker to cause kernel memory corruption by sending a specially crafted IOCTL request. This can lead to privilege escalation or system instability. The vulnerability has a high severity score of 7. No specific affected versions or patches have been disclosed yet.
CVE-2025-25051 is a medium-severity vulnerability affecting AutomationDirect CLICK Programmable Logic Controllers (PLCs) in versions C0-0x, C0-1x, and C2-x. The vulnerability stems from improper cryptographic key management (CWE-256), allowing an attacker with limited privileges and local access to decrypt sensitive data and impersonate legitimate users or devices. Exploitation does not require user interaction but does require some level of privileged access. Successful exploitation could enable lateral movement within industrial networks, potentially compromising network resources. No known exploits are currently in the wild, and no patches have been released yet. The CVSS score is 6.1, reflecting high confidentiality impact but limited integrity and no availability impact. European organizations using these PLCs in critical infrastructure or manufacturing environments are at risk, especially in countries with significant industrial automation sectors. Mitigation requires strict network segmentation, limiting local access, and monitoring for anomalous device behavior until a patch is available.
CVE-2025-67652 is a medium severity vulnerability affecting AutomationDirect CLICK Programmable Logic Controllers (PLCs), specifically versions C0-0x, C0-1x, and C2-x. The vulnerability arises from improper handling of credentials within project files, allowing an attacker with access to these files to impersonate users, escalate privileges, or gain unauthorized access to connected systems. Exploitation requires local access to the project file and low complexity attack conditions, with no user interaction needed. The vulnerability impacts confidentiality significantly but has limited effect on integrity and no impact on availability. No public exploits are currently known. European organizations using these PLCs in industrial control environments could face risks of unauthorized access and potential lateral movement within their networks. Mitigation requires strict access controls on project files, encryption of sensitive data, and monitoring for unauthorized access. Countries with significant industrial automation sectors and AutomationDirect market presence, such as Germany, France, Italy, and the UK, are most likely to be affected.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version
4.4.1.19.
The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and write files with arbitrary data on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version
4.4.1.19.
The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read arbitrary files on the target machine.
A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine
An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project.
A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question.
A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version
4.4.1.19. The vulnerability allows an attacker who can tamper with a productivity project to execute arbitrary code on the machine where the project is opened.
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.
An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions of the Click Programming Software.
