CVE-2025-67652
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password
An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services. The absence of robust encryption or secure handling mechanisms increases the likelihood of this type of exploitation, leaving sensitive information more vulnerable.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CLICK Programmable Logic Controller
- Vendor
- AutomationDirect
- Product
- CLICK Programmable Logic Controller
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| C0-0x | affected | Unavailable | Unavailable | Unavailable | None listed |
| C0-1x | affected | Unavailable | Unavailable | Unavailable | None listed |
| C2-x | affected | Unavailable | Unavailable | Unavailable | None listed |
| V3.90 | unaffected | Unavailable | Unavailable | Unavailable | None listed |