EUVD-2026-45038
GHSA-22g8-27fc-wwmw
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only trigger with low privileges required; impact is solely a high-severity availability crash with no confidentiality or integrity consequence.
Primary rating from Vendor (icscert).
CVSS VectorVendor: icscert
Lifecycle Timeline
2DescriptionCVE.org
A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash.
AnalysisAI
Divide-by-zero in AutomationDirect Productivity Suite enables a local, low-privileged attacker to crash the application, resulting in a denial-of-service condition on engineering workstations used to program AutomationDirect PLCs. All versions are affected per CPE wildcard data, and the vulnerability was disclosed via CISA ICS advisory ICSA-26-197-04, indicating ICS-CERT involvement and an OT/industrial context. No public exploit or CISA KEV listing has been identified at time of analysis, and exploitation impact is limited strictly to availability - no data exfiltration or tampering is possible.
Technical ContextAI
AutomationDirect Productivity Suite is a Windows-based engineering workstation application used to develop, configure, and deploy logic for AutomationDirect Productivity-series PLCs in industrial control system environments. CWE-369 (Divide By Zero) describes a class of numeric error where a program performs a division operation with a zero-valued denominator, resulting in an unhandled arithmetic exception that typically terminates the process. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H) confirms this is a locally triggerable, low-complexity flaw with high availability impact confined to the vulnerable system. The CPE string cpe:2.3:a:automationdirect:productivity_suite:*:*:*:*:*:*:*:* covers all tracked versions with no version floor or ceiling, suggesting the flaw is pervasive across the product line.
RemediationAI
Consult CISA ICS advisory ICSA-26-197-04 (https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04) and the AutomationDirect software downloads page (https://www.automationdirect.com/support/software-downloads) to identify and apply the latest available version of Productivity Suite - a specific patched version number has not been independently confirmed from the provided data and must be verified directly against vendor release notes. As a compensating control, restrict local logon access to engineering workstations running Productivity Suite to authorized engineering personnel only, enforcing least-privilege OS accounts to reduce the pool of users who could trigger this condition. Isolating OT engineering workstations from shared IT networks using network segmentation limits lateral movement opportunities that could precede a local exploit. Disabling shared or guest accounts on these workstations eliminates the lowest-barrier access path. Note that these controls reduce exposure but do not eliminate the vulnerability if insider threat or compromised credentials are the concern.
More in Productivity Suite
View allLocal privilege escalation in AutomationDirect Productivity Suite programming software stems from an out-of-bounds write
Local privilege escalation in AutomationDirect Productivity Suite lets an authenticated local attacker corrupt kernel me
Out-of-bounds read in AutomationDirect Productivity Suite enables a local low-privileged attacker to corrupt kernel memo
Out-of-bounds read in AutomationDirect Productivity Suite exposes kernel memory and enables denial-of-service on enginee
Out-of-bounds read in AutomationDirect Productivity Suite exposes kernel memory and system stability to a physically-pre
Same weakness CWE-369 – Divide By Zero
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today