{"id":"CVE-2025-59484","aliases":["EUVD-2025-30937","GHSA-p3m4-mwpv-24q7"],"status":"published","title":"AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm","description":"The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00124,"percentile":0.02123,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2025-09-23T22:08:40Z","modified":"2026-10-18T21:10:00Z","products":[{"vendor":"automationdirect","product":"click plus c0-0x cpu firmware"},{"vendor":"automationdirect","product":"click plus c0-1x cpu firmware"},{"vendor":"automationdirect","product":"click plus c2-x cpu firmware"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-01"},{"url":"https://www.automationdirect.com/support/software-downloads"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59484"},{"url":"https://github.com/advisories/GHSA-p3m4-mwpv-24q7"}],"sources":{"cve":[{"id":"CVE-2025-59484","title":"AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm","description":"The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.","status":"published","published":"2025-09-23T22:08:40.744Z","modified":"2025-09-24T14:08:07.973Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:32:47.812946Z"}],"euvd":[{"id":"EUVD-2025-30937","description":"The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.","status":"published","published":"2025-09-23T22:08:40Z","modified":"2025-09-24T14:08:07Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T20:31:40.063213Z"}],"ghsa":[{"id":"GHSA-p3m4-mwpv-24q7","title":"The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of...","description":"The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.","status":"published","published":"2025-09-24T00:30:41Z","modified":"2025-09-24T00:30:47Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T15:03:44.74353Z"}],"nvd":[{"id":"CVE-2025-59484","description":"The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.","status":"published","published":"2025-09-23T22:15:34.36Z","modified":"2026-10-18T21:10:00.12Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:11:32.559087Z"}]}}