AutomationDirect Productivity Suite Relative Path Traversal Vulnerability Allowing Arbitrary File Deletion

A relative path traversal vulnerability has been identified in AutomationDirect Productivity Suite version 4.4.1.19 and prior. This vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of files on the affected machine.

Remediation

Users are advised to update the Productivity Suite software to version 4.5.0.x or higher. For additional information, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405.