What is CVE-2025-60023?

CVE-2025-60023 is a medium-severity vulnerability in Automationdirect Productivity 1000 P1-540 CPU, classified under Relative Path Traversal. CVSS score: 4.0/10. Published 2025-10-23.

How severe is CVE-2025-60023?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Path Traversal in Automationdirect Productivity 1000 P1-540 CPU

CVE-2025-60023

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.

Published 2025-10-23 · last modified 2026-10-18.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N.

EPSS exploit prediction

EPSS: 0.005 (42.3th percentile), scored 2026-10-20.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 42.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: +0.000

Affected products

Automationdirect Productivity 1000 P1-540 CPU — versions 0
Automationdirect Productivity 1000 P1-550 CPU — versions 0
Automationdirect Productivity 2000 P2-550 CPU — versions 0
Automationdirect Productivity 2000 P2-622 CPU — versions 0
Automationdirect Productivity 3000 P3-530 CPU — versions 0
Automationdirect Productivity 3000 P3-550e CPU — versions 0
Automationdirect Productivity 3000 P3-622 CPU — versions 0
Automationdirect Productivity Suite — versions 0

Weakness classification (CWE)

CWE-23 — Relative Path Traversal

References

Frequently asked questions

What is CVE-2025-60023?: CVE-2025-60023 is a medium-severity vulnerability in Automationdirect Productivity 1000 P1-540 CPU, classified under Relative Path Traversal. CVSS score: 4.0/10. Published 2025-10-23.
How severe is CVE-2025-60023?: Medium severity. CVSS v3 base score is 4.0 out of 10.