CVE-2025-67652CWE-261

AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password

Medium · published January 22, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

An attacker with access to the project file could use the exposed

credentials to impersonate users, escalate privileges, or gain

unauthorized access to systems and services. The absence of robust

encryption or secure handling mechanisms increases the likelihood of

this type of exploitation, leaving sensitive information more

vulnerable.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00105 · 1.0th percentile
Weakness
CWE-261 · Weak Encoding for Password
Published
2026-01-22T22:17Z
EPSS history
Timeline
  • 22 JAN 22:17Z
    AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password
    cvelistv5