AutomationDirect Productivity Suite Incorrect Permission Assignment Vulnerability

A vulnerability allowing incorrect permission assignment for critical resources has been identified in AutomationDirect Productivity Suite version 4.4.1.19 and prior. This vulnerability enables an attacker with low-privileged credentials to change their role, thereby gaining full control access to projects.

Impact

Exploitation of this vulnerability could allow an attacker to gain full control access to projects within the Productivity Suite.

Remediation

Users are advised to update the Productivity Suite software to version 4.5.0.x or higher. For additional information, please refer to AutomationDirect's security considerations document.