CVE-2025-59484: falha de alta gravidade em AutomationDirect CLICK PLUS C0-0x CPU firmware
AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.1%
The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
AutomationDirect · CLICK PLUS C0-0x CPU firmwareAutomationDirect · CLICK PLUS C0-1x CPU firmwareAutomationDirect · CLICK PLUS C2-x CPU firmwareCVEs relacionadas — AutomationDirect CLICK PLUS C0-0x CPU firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2025-58473HIGHAutomationDirect CLICK PLUS Improper Resource Shutdown or ReleaseEPSS 0.4%CVE-2025-57882HIGHAutomationDirect CLICK PLUS Improper Resource Shutdown or ReleaseEPSS 0.3%CVE-2025-55069HIGHAutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number GeneratorEPSS 0.3%CVE-2025-58069MEDIUMAutomationDirect CLICK PLUS Use of Hard-coded Cryptographic KeyEPSS 0.3%CVE-2025-55038HIGHAutomationDirect CLICK PLUS Missing AuthorizationEPSS 0.3%CVE-2025-54855MEDIUMAutomationDirect CLICK PLUS Cleartext Storage of Sensitive InformationEPSS 0.1%