CVE-2025-54855: Automationdirect Click Plus c0-0x CPU Firmware

Medium severity, CVSS 4.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file system, while an administrator session is active, to steal credentials stored in clear text.

Affected products

• Automationdirect Click Plus c0-0x CPU Firmware: before v3.71 (fixed in v3.71)
• Automationdirect Click Plus c0-1x CPU Firmware: before v3.71 (fixed in v3.71)
• Automationdirect Click Plus c2-X CPU Firmware: before v3.71 (fixed in v3.71)

Published 2025-09-23. Last modified 2026-06-17.