Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2025-54855

AutomationDirect CLICK PLUS Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file system, while an administrator session is active, to steal credentials stored in clear text.

CVSS 4.0 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-55038

AutomationDirect CLICK PLUS Missing Authorization

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-55069

AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator

A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software implements a predictable seed for its pseudo-random number generator, which compromises the security of the generated private keys.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-57882

AutomationDirect CLICK PLUS Improper Resource Shutdown or Release

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-58069

AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-coded AES key used to protect the initial messages of a new KOPS session.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-58473

AutomationDirect CLICK PLUS Improper Resource Shutdown or Release

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions of the Click Programming Software.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-59484

AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus