CVE-2025-59484
AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 23, 2025
- Updated
- Sep 24, 2025
- Reserved
- Sep 16, 2025
Description
The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N | icscert |
| 3.1 | 8.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L | icscert |
Weaknesses
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm
Affected Products
| Product | Versions |
|---|---|
CLICK PLUS C0-0x CPU firmwareAutomationDirect |
|
CLICK PLUS C0-1x CPU firmwareAutomationDirect |
|
CLICK PLUS C2-x CPU firmwareAutomationDirect |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.