Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-67652 EUVD-2026-4502GHSA-cf6r-jpjw-rvwr

AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password

Published Jan 22, 2026 · Updated Jan 23, 2026 · Assigned by icscert

Description

An attacker with access to the project file could use the exposed
credentials to impersonate users, escalate privileges, or gain
unauthorized access to systems and services. The absence of robust
encryption or secure handling mechanisms increases the likelihood of
this type of exploitation, leaving sensitive information more
vulnerable.

Affected products

VendorProductAffectedFixed
AutomationDirect CLICK Programmable Logic Controller C0-0x, C0-1x, C2-x V3.90

Advisories 1

References