Lucene search
+L

4 matches found

NVD
NVD
•added 2025/09/23 11:15 p.m.•14 views

CVE-2025-55038

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variabl...

7.6CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/23 10:24 p.m.•18 views

CVE-2025-55038

CVE-2025-55038 affects AutomationDirect CLICK PLUS C2-03CPU2 firmware 3.60. Through the KOPR protocol used by the Remote PLC app, authenticated users with low-level permissions can read and modify PLC variables beyond their authorization. Documents substantiate an authorization bypass with impact...

7.6CVSS6.4AI score0.00254EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•3 views

CVE-2025-55038: Missing Authorization

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variabl...

7.6CVSS5.7AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/23 12:00 a.m.•17 views

PT-2025-39226

Name of the Vulnerable Software and Affected Versions Click Plus C2-03CPU2 version 3.60 Description An authorization bypass exists in the Click Plus C2-03CPU2 device firmware. An authenticated user with low-level access can exploit this issue through the KOPR protocol, used by the Remote PLC...

7.6CVSS6.2AI score0.00254EPSS
SaveExploits0References6
Rows per page
Query Builder