Vulnerabilities

TI-2025-35736 CVE-2025-57882 · GHSA-xfrq-jq75-3wqw

AutomationDirect CLICK PLUS Improper Resource Shutdown or Release

LOW 36

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00331 Published 2025-09-23 Fixed in v3.71 CWE-404

TI-2025-34730 CVE-2025-55038 · GHSA-28rh-fv64-h63q

LOW 35

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.0026 Published 2025-09-23 Fixed in v3.71 CWE-862

TI-2025-36230 CVE-2025-58473 · GHSA-jpgr-mp9r-3h9m

LOW 36

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0035 Published 2025-09-23 Fixed in v3.71 CWE-404

TI-2025-34759 CVE-2025-55069 · GHSA-mqmm-6427-xmx3

LOW 39

A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00308 Published 2025-09-23 Fixed in v3.71 CWE-337

TI-2025-37028 CVE-2025-59484 · GHSA-p3m4-mwpv-24q7

LOW 38

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00124 Published 2025-09-23 Fixed in v3.71 CWE-327

TI-2025-35912 CVE-2025-58069 · GHSA-wgx5-63fm-m4g7

LOW 36

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00262 Published 2025-09-23 Fixed in v3.71 CWE-321

TI-2025-34589 CVE-2025-54855 · GHSA-8g2q-x6hf-4cpc

LOW 18

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60.

CVSS 4.0MEDIUM 4.1 Local High privileges User interaction EPSS 0.00098 Published 2025-09-23 Fixed in v3.71 CWE-312