CVE-2025-67652— AutomationDirect CLICK Programmable Logic Controller 安全漏洞

AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password

An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services. The absence of robust encryption or secure handling mechanisms increases the likelihood of this type of exploitation, leaving sensitive information more vulnerable.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

口令使用弱密码学算法

AutomationDirect CLICK Programmable Logic Controller 安全漏洞

AutomationDirect CLICK Programmable Logic Controller是美国AutomationDirect公司的一个可编程逻辑控制器。 AutomationDirect CLICK Programmable Logic Controller存在安全漏洞，该漏洞源于项目文件中凭据暴露且缺乏强加密或安全处理机制，可能导致攻击者冒充用户、提升权限或未经授权访问系统和服务。

N/A

N/A