Description
An out-of-bounds read vulnerability in the Productivity Suite allows a
local attacker to trigger kernel memory corruption by sending a crafted
IOCTL request. This could lead to limited information disclosure or
disruption of the affected product.
Published: 2026-07-16
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an out-of-bounds read in AutomationDirect’s Productivity Suite that allows a local attacker to send a crafted IOCTL request to the kernel, potentially causing memory corruption. This defect can lead to limited information disclosure or system disruption. The weakness is a classic buffer over-read, identified as CWE-125, which violates proper bounds checking in kernel space.

Affected Systems

AutomationDirect Productivity Suite is affected. Any installation prior to version 4.7.0.47 is vulnerable; newer releases contain the fix.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity, while the EPSS score of < 1% shows only a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The attack likely requires local access to the engineering workstation to craft the IOCTL request, so remote exploitation is not documented in the provided information.

Generated by OpenCVE AI on July 31, 2026 at 01:20 UTC.

Remediation

Vendor Solution

AutomationDirect recommends that users update Productivity suite to v4.7.0.47 and above  https://www.automationdirect.com/support/software-downloads

Vendor Workaround

If the update cannot be applied right away, the following compensating controls are recommended until the upgrade can be performed. * Disconnect the engineering workstation from external networks (e.g., the internet or corporate LAN) to reduce exposure. * Use only trusted, dedicated internal networks or air-gapped systems for device communication. * Restrict both physical and logical access to authorized personnel only. * Configure whitelisting so that only trusted, pre-approved applications are allowed to run. Block any unauthorized software. * Use antivirus or EDR tools and configure host-based firewalls to block unauthorized access attempts. * Enable and regularly review system logs to detect suspicious or unauthorized activity. * Maintain secure, tested backups of the PLC and its configurations to minimize downtime in case of an incident. * Continuously evaluate risks associated with running outdated firmware and adjust compensating measures accordingly.

OpenCVE Recommended Actions

  • Apply the AutomationDirect update to version v4.7.0.47 or later to eliminate the buffer over-read.
  • If an immediate update is not possible, isolate the affected workstation by disconnecting it from external networks such as the Internet or corporate LAN.
  • Restrict both physical and logical access to authorized personnel only, ensuring that only trusted engineers can operate the workstation.
  • Implement application whitelisting to allow only approved software to run, and block any unapproved applications.
  • Deploy antivirus or EDR solutions and configure host‑based firewalls to block unauthorized access attempts.
  • Enable and regularly review system logs to detect suspicious behavior.
  • Maintain secure, tested backups of the PLC and its configurations to reduce downtime in case of an incident.
  • Continuously evaluate risks associated with running outdated firmware and adjust compensating controls accordingly.

Generated by OpenCVE AI on July 31, 2026 at 01:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 17 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 16 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Automationdirect
Automationdirect productivity Suite
Vendors & Products Automationdirect
Automationdirect productivity Suite

Thu, 16 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product.
Title AutomationDirect Productivity Suite Out-of-bounds Read
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Automationdirect Productivity Suite
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-07-17T13:16:50.596Z

Reserved: 2026-07-09T15:00:24.538Z

Link: CVE-2026-57896

cve-icon Vulnrichment

Updated: 2026-07-17T13:16:38.775Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T01:30:05Z

Weaknesses