CVE-2025-59484CWE-327

CVE-2025-59484

High · published September 24, 2025

CVSS v3.1
8.3
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00124 · 1.9th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2025-09-24T02:15Z
References (2)
https://www.automationdirect.com/support/software-downloads · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-01 · [email protected]
EPSS history
Timeline
  • 23 SEP 22:08Z
    AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm
    cvelistv5