Back to Database
Status published
High
CVE-2025-59484
AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm
Vulnerability Description
The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59484
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Luca Borzacchiello and Diego Zaffaroni of Nozomi Networks reported these vulnerabilities to Automation Direct.
References
More from AutomationDirect
View All →CVE-2025-67652
AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password
Medium
6.1
CVE-2025-62688
AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource
Medium
6.9
CVE-2025-62498
AutomationDirect Productivity Suite Relative Path Traversal
High
8.6
CVE-2025-61977
AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password
High
7.3
CVE-2025-61934
AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327
Critical
9.3
Affected Vendor
AutomationDirect
View all reports →Affected Software
CLICK PLUS C0-0x CPU firmware, CLICK PLUS C0-1x CPU firmware, CLICK PLUS C2-x CPU firmware
Vulnerable Versions:
0
Timeline
Official Publish:
September 23rd, 2025
Last Modified:
September 24th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L