Click Plus C2 X Cpu Firmware
Approved changes feed: RSS · Atom
cpe:2.3:a:automationdirect:click_plus_c2-x_cpu_firmware:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Automationdirect (5dd60aaf-eea3-5732-9a9c-5b671c0ed914) |
|---|---|
| Product | Click Plus C2 X Cpu Firmware (5ed5aece-e460-55c2-b3ea-de5dd567ad11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59484 |
vulnerable | 2026-06-08 07:35:22.056227 |
AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm
HIGH (8.3)
The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.
Published: 2025-09-23T22:08:40.744Z
Updated: 2025-09-24T14:08:07.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58473 |
vulnerable | 2026-06-08 07:35:18.399595 |
AutomationDirect CLICK PLUS Improper Resource Shutdown or Release
MEDIUM (5.9)
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions of the Click Programming Software.
Published: 2025-09-23T22:21:06.164Z
Updated: 2025-09-24T14:07:48.727Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58069 |
vulnerable | 2026-06-08 07:35:17.034147 |
AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key
MEDIUM (5.3)
The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-coded AES key used to protect the initial messages of a new KOPS session.
Published: 2025-09-23T22:04:58.449Z
Updated: 2025-09-24T14:08:24.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57882 |
vulnerable | 2026-06-08 07:33:16.303629 |
AutomationDirect CLICK PLUS Improper Resource Shutdown or Release
MEDIUM (5.9)
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.
Published: 2025-09-23T22:27:02.078Z
Updated: 2025-09-24T14:05:58.599Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55069 |
vulnerable | 2026-06-08 07:33:14.028562 |
AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator
HIGH (8.3)
A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software implements a predictable seed for its pseudo-random number generator, which compromises the security of the generated private keys.
Published: 2025-09-23T22:15:46.833Z
Updated: 2025-09-24T14:07:59.115Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55038 |
vulnerable | 2026-06-08 07:33:14.001375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54855 |
vulnerable | 2026-06-08 07:33:13.485875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.