CVE-2025-67652
AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password
- State
- Published
- Severity
- 6.1 Medium
- Published
- Jan 22, 2026
- Updated
- Jan 23, 2026
- Reserved
- Dec 9, 2025
Description
An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services. The absence of robust encryption or secure handling mechanisms increases the likelihood of this type of exploitation, leaving sensitive information more vulnerable.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.1 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
CLICK Programmable Logic ControllerAutomationDirect |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.