CVE-2025-25051CWE-256

AutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password

Medium · published January 22, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

An attacker could decrypt sensitive data, impersonate legitimate users

or devices, and potentially gain access to network resources for lateral

attacks.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.6th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2026-01-22T22:21Z
EPSS history
Timeline
  • 22 JAN 22:21Z
    AutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password
    cvelistv5