CVE-2025-59776: CVE-2025-59776: güvenlik açığı

Açıklama (NVD)

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.

Özet bilgiler

CVSS v3.1

4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

CVSS v4.0

6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,51 (yüzdelik 44)

CWE

CWE-23

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• support.automationdirect.com
• www.automationdirect.com
• www.cisa.gov
• CWE-23