Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 62

Export CSV
CVE-2026-61389

AutomationDirect Productivity Suite Out-of-bounds Write

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-60140

AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exposing sensitive information or causing the affected product to become unstable or unavailable.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-60063

AutomationDirect Productivity Suite Out-of-bounds Write

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-61378

AutomationDirect Productivity Suite Divide By Zero

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-57896

AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2026-60073

AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of kernel memory.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Productivity Suite
CVE-2022-2003

AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
D0-06aa D0-06aa Firmware D0-06ar and 15 more
CVE-2025-55038

AutomationDirect CLICK PLUS Missing Authorization

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-55069

AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator

A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software implements a predictable seed for its pseudo-random number generator, which compromises the security of the generated private keys.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-58069

AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-coded AES key used to protect the initial messages of a new KOPS session.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-36535

AutomationDirect MB-Gateway Missing Authentication for Critical Function

The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality.

CVSS 4.0 · 10 Critical EPSS 1.2% KEV · Not listed
Vendors
Automationdirect
Products
Mb Gateway
CVE-2025-25051

AutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password

An attacker could decrypt sensitive data, impersonate legitimate users or devices, and potentially gain access to network resources for lateral attacks.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plc
CVE-2024-43099

AutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay

The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this session key, they can inject traffic into an ongoing authenticated session. To successfully achieve this, the attacker also needs to spoof both the IP address and MAC address of the originating host which is typical of a session-based attack.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
H2-dm1e Firmware
CVE-2025-54855

AutomationDirect CLICK PLUS Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file system, while an administrator session is active, to steal credentials stored in clear text.

CVSS 4.0 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-57882

AutomationDirect CLICK PLUS Improper Resource Shutdown or Release

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-61934

AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2025-59484

AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
Click Plus
CVE-2025-58078

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and write files with arbitrary data on the target machine.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more
CVE-2024-45368

AutomationDirect DirectLogic H2-DM1E Session Fixation

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
H2-dm1e Firmware
CVE-2025-59776

AutomationDirect Productivity Suite Relative Path Traversal

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
P1-540 P1-550 P2-550 and 5 more