AutomationDirect CLICK PLUS
Successful exploitation of these vulnerabilities disclose sensitive information, modify device settings, escalate privileges, or cause a denial-of-service condition on the affected device.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-58473US | — | — | ||
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenti… | ||||
| CVE-2025-57882US | — | — | ||
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenti… | ||||
| CVE-2025-55069US | — | — | ||
A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the… | ||||
| CVE-2025-55038US | —OT erhöht | — | ||
An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application… | ||||
| CVE-2025-59484US | —OT erhöht | — | ||
The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an i… | ||||
| CVE-2025-58069US | —OT erhöht | — | ||
The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-code… | ||||
| CVE-2025-54855US | —OT erhöht | — | ||
Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file sy… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-266-01 JSONself
- ICSA Advisory ICSA-25-266-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (21)
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-0x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C0-1x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
- MitigationCLICK PLUS C2-x CPU firmware
Access Control – Restrict both physical and logical access to authorized personnel only.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan