CVE-2025-600234.0MediumCWE-23

CVE-2025-60023: AutomationDirect Productivity Suite Relative Path Traversal

AutomationDirect · Productivity Suite

Vendor fix available · Affected: AutomationDirect Productivity Suite · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.5%probability of exploitation in the next 30 days

44th percentile

050100

Higher than 44% of scored CVEs

4.0MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.

Affected products8

From the CVE record. A product or version that is not listed is unknown, not unaffected.

AutomationDirect · Productivity Suiteup to and including SW V4.2.1.9
AutomationDirect · Productivity 3000 P3-622 CPUup to and including SW V4.2.1.9
AutomationDirect · Productivity 3000 P3-550E CPUup to and including SW V4.2.1.9
AutomationDirect · Productivity 3000 P3-530 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 2000 P2-622 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 2000 P2-550 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 1000 P1-550 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 1000 P1-540 CPUbefore SW v4.4.1.19

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Relative Path Traversal · File and Path Handling
Vendor: AutomationDirect
Published: October 2025
Band: Unlikely (under 1%), October 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-60023 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.