Lucene search
K

255 matches found

Vulnrichment
Vulnrichment
added 2026/01/22 10:21 p.m.2 views

CVE-2025-25051 AutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password

An attacker could decrypt sensitive data, impersonate legitimate users or devices, and potentially gain access to network resources for lateral attacks...

6.1CVSS5.5AI score0.00021EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/22 10:21 p.m.15 views

CVE-2025-25051 AutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password

An attacker could decrypt sensitive data, impersonate legitimate users or devices, and potentially gain access to network resources for lateral attacks...

6.1CVSS0.00021EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 10:21 p.m.3 views

CVE-2025-25051

CVE-2025-25051 pertains to AutomationDirect CLICK PLC, where the vulnerability arises from plaintext storage of a password in the project file. An attacker with access to the project file could decrypt credentials, impersonate legitimate users or devices, and potentially access network resources ...

6.1CVSS5.5AI score0.00021EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 10:17 p.m.3 views

CVE-2025-67652 AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password

An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services. The absence of robust encryption or secure handling mechanisms increases the likelihood of this type of exploitation, leavi...

6.1CVSS5.5AI score0.00006EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 10:17 p.m.5 views

CVE-2025-67652

CVE-2025-67652 affects AutomationDirect CLICK PLC (project file handling) with weak password encoding in the addressed project file. Root cause: insufficient encryption/secure storage of credentials, enabling an attacker with local access to the project file to impersonate users, escalate privile...

6.1CVSS5.5AI score0.00006EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.1 views

AutomationDirect CLICK Programmable Logic Controller security vulnerability

The AutomationDirect CLICK Programmable Logic Controller is a programmable logic controller developed by the AutomationDirect company in the United States. The AutomationDirect CLICK Programmable Logic Controller has a security vulnerability. This vulnerability allows attackers to decrypt sensiti...

6.1CVSS5.8AI score0.00021EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.1 views

AutomationDirect CLICK Programmable Logic Controller security vulnerability

The AutomationDirect CLICK Programmable Logic Controller is a programmable logic controller developed by the AutomationDirect company in the United States. The AutomationDirect CLICK Programmable Logic Controller has a security vulnerability. This vulnerability stems from the exposure of...

6.1CVSS5.8AI score0.00006EPSS
Exploits0References3
CVE
CVE
added 2025/10/23 9:58 p.m.7 views

CVE-2025-62688

CVE-2025-62688 concerns Productivity Suite software v4.4.1.19, where an incorrect permission assignment for a critical resource enables a user with low-privileged credentials to change their role and gain full control access to the project. The Red Hat, NVD, and other feeds corroborate the same d...

7.1CVSS6.5AI score0.00022EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/23 9:58 p.m.2 views

CVE-2025-62688 AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...

7.1CVSS6.5AI score0.00022EPSS
Exploits0References4
CISA
CISA
added 2025/10/23 12:0 p.m.6 views

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-296-01 AutomationDirect Productivity Suite ICSA-25-296-02 ASKI Energy ALS-Mini-S8 and ALS-Mini-S4...

6.6AI score
Exploits0References8
ICS
ICS
added 2025/10/23 6:0 a.m.4 views

AutomationDirect Productivity Suite

RISK EVALUATION Successful exploitation of these vulnerabilities could enable an attacker to execute arbitrary code, disclose information, gain full-control access to projects, or obtain read and write access to files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

7.9AI score
Exploits0References13
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.1 views

AutomationDirect Productivity Suite 安全漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which stems from a relative path traversal vulnerability that could allow an...

8.3CVSS6.7AI score0.00638EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.1 views

AutomationDirect Productivity Suite 安全漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which originates from a relative path traversal that can be performed by a remote attack...

8.3CVSS6.9AI score0.00228EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.2 views

AutomationDirect Productivity Suite 授权问题漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect. An authorization issue vulnerability exists in AutomationDirect Productivity Suite version v4.4.1.19, which stems from a weak password recovery mechanism that allows an attacker to...

7.3CVSS6.8AI score0.00017EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.2 views

AutomationDirect Productivity Suite 安全漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which originates from a remote attacker who can perform relative path traversal via the...

6.3CVSS7AI score0.0007EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.2 views

AutomationDirect Productivity Suite 安全漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which stems from a relative path traversal vulnerability that could allow an...

8.2CVSS6.7AI score0.00059EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.1 views

AutomationDirect Productivity Suite 安全漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which stems from a relative path traversal vulnerability that could lead to the executio...

8.8CVSS6.8AI score0.00087EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.3 views

AutomationDirect Productivity Suite 安全漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version v4.4.1.19, which originates from a binding to an unrestricted IP address and could allow an...

10CVSS6.7AI score0.00368EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-5535

Malware in sbrugna...

9.3CVSS7.7AI score0.00127EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-34744

Malicious code in bioql PyPI...

9.6CVSS7.5AI score0.00107EPSS
Exploits0References2
Rows per page
Query Builder