CVE-2025-25051CWE-256
AutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password
Medium · published January 22, 2026
What it is
An attacker could decrypt sensitive data, impersonate legitimate users
or devices, and potentially gain access to network resources for lateral
attacks.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00117 · 1.6th percentile
- Weakness
- CWE-256 · Plaintext Storage of a Password
- Published
- 2026-01-22T22:21Z
EPSS history
Timeline