CVE-2025-58069 — AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-c…
Published: 2025-09-23 · CVSS: 6.9 · CVSS 4.0
The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-coded AES key used to protect the initial messages of a new KOPS session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7