Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-67652

AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password

Description

An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services. The absence of robust encryption or secure handling mechanisms increases the likelihood of this type of exploitation, leaving sensitive information more vulnerable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AutomationDirect CLICK Programmable Logic Controller

Default version status: unaffected

  • C0-0xaffected
  • C0-1xaffected
  • C2-xaffected
  • V3.90unaffected

References