CVE-2025-59484: Automationdirect Click Plus c0-0x CPU Firmware

High severity, CVSS 8.3. EPSS: 0.1% chance of exploitation in the next 30 days.

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.

Affected products

• Automationdirect Click Plus c0-0x CPU Firmware: before v3.71 (fixed in v3.71)
• Automationdirect Click Plus c0-1x CPU Firmware: before v3.71 (fixed in v3.71)
• Automationdirect Click Plus c2-X CPU Firmware: before v3.71 (fixed in v3.71)

Published 2025-09-23. Last modified 2026-06-17.