Medium severity · published Jan 22, 2026
CVE-2025-67652
AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password
6.1
CVSS
0.1%
EPSS
No
On KEV
Description
An attacker with access to the project file could use the exposed
credentials to impersonate users, escalate privileges, or gain
unauthorized access to systems and services. The absence of robust
encryption or secure handling mechanisms increases the likelihood of
this type of exploitation, leaving sensitive information more
vulnerable.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
CLICK Programmable Logic Controller · AutomationDirect
C0-0x; C0-1x; C2-x · source: vendor
Affected product
CP
CLICK Programmable Logic Controller
AutomationDirect
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-67652
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-67652
github.com
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-022-02.json
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-02
More from CLICK Programmable Logic Controller
6.1
CVE-2025-25051
AutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password
