CVE-2025-58078 HIGH

CVE-2025-58078: AutomationDirect Productivity Suite Relative Path Traversal

Vendor Automationdirect
Product Productivity Suite
Weakness CWE-23
Published October 23, 2025
Last update October 24, 2025
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L

What the vulnerability does

01Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and write files with arbitrary data on the target machine.

Key dates

02Disclosure timeline

October 23, 2025 CVE published
October 24, 2025 Record updated