AutomationDirect CLICK PLUS
Successful exploitation of these vulnerabilities disclose sensitive information, modify device settings, escalate privileges, or cause a denial-of-service condition on the affected device.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-58473US | — | — | ||
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenti… | ||||
| CVE-2025-57882US | — | — | ||
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenti… | ||||
| CVE-2025-55069US | — | — | ||
A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the… | ||||
| CVE-2025-55038US | —OT elevated | — | ||
An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application… | ||||
| CVE-2025-59484US | —OT elevated | — | ||
The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an i… | ||||
| CVE-2025-58069US | —OT elevated | — | ||
The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-code… | ||||
| CVE-2025-54855US | —OT elevated | — | ||
Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file sy… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-266-01 JSONself
- ICSA Advisory ICSA-25-266-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (21)
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan