Productivity Suite CVE-2026-60140

The primary remediation is to upgrade AutomationDirect Productivity Suite to the patched version specified in CISA ICS advisory ICSA-26-197-04 (https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04); the exact fixed version number is not confirmed in available data and must be verified directly against that advisory and the vendor's software downloads portal (https://www.automationdirect.com/support/software-downloads). As compensating controls pending patch deployment: restrict local logon rights on engineering workstations to only named authorized personnel using Active Directory group policy, reducing the pool of accounts capable of issuing IOCTL requests to the vulnerable driver. Apply application allowlisting (e.g., Windows Defender Application Control) to prevent unauthorized executables from loading or interacting with the Productivity Suite driver. In OT environments, enforce network segmentation to prevent lateral movement onto engineering workstations, limiting the blast radius if an adjacent system is compromised. Note that these controls reduce attack surface but do not eliminate the underlying kernel driver vulnerability.