Description
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions of the Click Programming Software.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AutomationDirect | CLICK PLUS C0-0x CPU firmware | < v3.71 | v3.71 |
| AutomationDirect | CLICK PLUS C0-1x CPU firmware | < v3.71 | v3.71 |
| AutomationDirect | CLICK PLUS C2-x CPU firmware | < v3.71 | v3.71 |
Advisories 1
- ICSA-25-266-01 AutomationDirect CLICK PLUS CISA ICS & IT advisories · Sep 23, 2025