CVE-2025-59484: CVE-2025-59484: güvenlik açığı

Açıklama (NVD)

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.

Özet bilgiler

CVSS v3.1

8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

CVSS v4.0

8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,12 (yüzdelik 2)

CWE

CWE-327

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.automationdirect.com
• www.cisa.gov
• CWE-327