AutomationDirect Productivity Suite Weak Password Recovery Vulnerability

A vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19 and prior, allowing an attacker to decrypt an encrypted project by correctly answering just one recovery question. This issue arises from a weak password recovery mechanism for forgotten passwords.

Impact

Exploitation of this vulnerability could enable an attacker to gain unauthorized access to encrypted projects, potentially leading to arbitrary code execution, information disclosure, or unauthorized access to files and project controls.

Remediation

Users are advised to update the Productivity Suite software to version 4.5.0.x or higher. For additional guidance, consult AutomationDirect's security considerations document or contact AutomationDirect Technical Support.