CVE-2026-57896

Summary

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product.

Affected Software

VendorProductVersion RangeStatus
AutomationDirectProductivity Suite0 <= v4.6.2.2affected
AutomationDirectProductivity Suitev4.7.0.47unaffected

Weaknesses

  • CWE-125: CWE-125

Workarounds

If the update cannot be applied right away, the following compensating controls are recommended until the upgrade can be performed.

  • Disconnect the engineering workstation from external networks (e.g., the internet or corporate LAN) to reduce exposure.
  • Use only trusted, dedicated internal networks or air-gapped systems for device communication.
  • Restrict both physical and logical access to authorized personnel only.
  • Configure whitelisting so that only trusted, pre-approved applications are allowed to run. Block any unauthorized software.
  • Use antivirus or EDR tools and configure host-based firewalls to block unauthorized access attempts.
  • Enable and regularly review system logs to detect suspicious or unauthorized activity.
  • Maintain secure, tested backups of the PLC and its configurations to minimize downtime in case of an incident.
  • Continuously evaluate risks associated with running outdated firmware and adjust compensating measures accordingly.

References