CVE-2025-6193410.0CriticalCWE-1327

CVE-2025-61934: AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

AutomationDirect · Productivity Suite

Vendor fix available · Affected: AutomationDirect Productivity Suite · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.7%probability of exploitation in the next 30 days

52nd percentile

050100

Higher than 52% of scored CVEs

10.0CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

Affected products8

From the CVE record. A product or version that is not listed is unknown, not unaffected.

AutomationDirect · Productivity Suiteup to and including SW V4.2.1.9
AutomationDirect · Productivity 3000 P3-622 CPUup to and including SW V4.2.1.9
AutomationDirect · Productivity 3000 P3-550E CPUup to and including SW V4.2.1.9
AutomationDirect · Productivity 3000 P3-530 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 2000 P2-622 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 2000 P2-550 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 1000 P1-550 CPUup to and including SW v4.4.1.19
AutomationDirect · Productivity 1000 P1-540 CPUbefore SW v4.4.1.19

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Binding to an Unrestricted IP Address · Access Control
Vendor: AutomationDirect
Published: October 2025
Band: Unlikely (under 1%), October 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-61934 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.