AutomationDirect Productivity Suite Relative Path Traversal Vulnerability

A relative path traversal vulnerability has been identified in AutomationDirect Productivity Suite version 4.4.1.19 and prior. This vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.

Impact

Exploitation of this vulnerability could enable an attacker to create arbitrary directories on the target machine.

Remediation

Users are advised to update the Productivity Suite programming software to version 4.5.0.x or higher. For additional information, please refer to AutomationDirect's security considerations.