CVE-2025-58456: CVE-2025-58456: güvenlik açığı

Açıklama (NVD)

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read arbitrary files on the target machine.

Özet bilgiler

CVSS v3.1

6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

CVSS v4.0

8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,62 (yüzdelik 50)

CWE

CWE-23

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• support.automationdirect.com
• www.automationdirect.com
• www.cisa.gov
• CWE-23