Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-59484

AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AutomationDirect CLICK PLUS C0-0x CPU firmware

Default version status: unaffected

  • 0 to < v3.71affected

AutomationDirect CLICK PLUS C0-1x CPU firmware

Default version status: unaffected

  • 0 to < v3.71affected

AutomationDirect CLICK PLUS C2-x CPU firmware

Default version status: unaffected

  • 0 to < v3.71affected

References