AutomationDirect Productivity Suite

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker with local or physical access to cause memory corruption, unintended information disclosure, application instability, or a denial-of-service condition in the affected product.

CVEs (6)

Remediations

• AutomationDirect recommends that users update Productivity suite to v4.7.0.47 and above https://www.automationdirect.com/support/software-downloads.
• If the update cannot be applied right away, the following compensating controls are recommended until the upgrade can be performed.
• Disconnect the engineering workstation from external networks (e.g., the internet or corporate LAN) to reduce exposure.
• Use only trusted, dedicated internal networks or air-gapped systems for device communication.
• Restrict both physical and logical access to authorized personnel only.
• Configure whitelisting so that only trusted, pre-approved applications are allowed to run. Block any unauthorized software.
• Use antivirus or EDR tools and configure host-based firewalls to block unauthorized access attempts.
• Enable and regularly review system logs to detect suspicious or unauthorized activity.
• Maintain secure, tested backups of the PLC and its configurations to minimize downtime in case of an incident.
• Continuously evaluate risks associated with running outdated firmware and adjust compensating measures accordingly.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing