{"id":"CVE-2025-67652","aliases":["EUVD-2026-4502","GHSA-cf6r-jpjw-rvwr"],"status":"published","title":"AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password","description":"An attacker with access to the project file could use the exposed \ncredentials to impersonate users, escalate privileges, or gain \nunauthorized access to systems and services. The absence of robust \nencryption or secure handling mechanisms increases the likelihood of \nthis type of exploitation, leaving sensitive information more \nvulnerable.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00105,"percentile":0.01066,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-261"],"published":"2026-01-22T22:17:53Z","modified":"2026-06-17T09:57:59Z","products":[{"vendor":"automationdirect","product":"click programmable logic controller"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-02"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-022-02.json"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67652"},{"url":"https://github.com/advisories/GHSA-cf6r-jpjw-rvwr"}],"sources":{"cve":[{"id":"CVE-2025-67652","title":"AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password","description":"An attacker with access to the project file could use the exposed \ncredentials to impersonate users, escalate privileges, or gain \nunauthorized access to systems and services. The absence of robust \nencryption or secure handling mechanisms increases the likelihood of \nthis type of exploitation, leaving sensitive information more \nvulnerable.","status":"published","published":"2026-01-22T22:17:53.763Z","modified":"2026-01-23T20:15:30.472Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-261"],"updated_at":"2026-11-02T14:32:52.21763Z"}],"euvd":[{"id":"EUVD-2026-4502","description":"An attacker with access to the project file could use the exposed \ncredentials to impersonate users, escalate privileges, or gain \nunauthorized access to systems and services. The absence of robust \nencryption or secure handling mechanisms increases the likelihood of \nthis type of exploitation, leaving sensitive information more \nvulnerable.","status":"published","published":"2026-01-22T22:17:53Z","modified":"2026-01-23T20:15:30Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:48:47.68467Z"}],"ghsa":[{"id":"GHSA-cf6r-jpjw-rvwr","title":"An attacker with access to the project file could use the exposed \ncredentials to impersonate...","description":"An attacker with access to the project file could use the exposed \ncredentials to impersonate users, escalate privileges, or gain \nunauthorized access to systems and services. The absence of robust \nencryption or secure handling mechanisms increases the likelihood of \nthis type of exploitation, leaving sensitive information more \nvulnerable.","status":"published","published":"2026-01-23T00:31:17Z","modified":"2026-01-23T00:31:24Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"cwes":["CWE-261"],"updated_at":"2026-11-02T15:05:52.452073Z"}],"nvd":[{"id":"CVE-2025-67652","description":"An attacker with access to the project file could use the exposed \ncredentials to impersonate users, escalate privileges, or gain \nunauthorized access to systems and services. The absence of robust \nencryption or secure handling mechanisms increases the likelihood of \nthis type of exploitation, leaving sensitive information more \nvulnerable.","status":"published","published":"2026-01-22T23:15:50.3Z","modified":"2026-06-17T09:57:59.34Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-261"],"updated_at":"2026-11-02T14:11:59.073638Z"}]}}