Description
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.
Scores
CVSS v3
5.9
EPSS
0.0008
EPSS Percentile
23.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-404
Status
published
Products (3)
AutomationDirect/CLICK PLUS C0-0x CPU firmware
< v3.71
AutomationDirect/CLICK PLUS C0-1x CPU firmware
< v3.71
AutomationDirect/CLICK PLUS C2-x CPU firmware
< v3.71
Published
Sep 23, 2025
Tracked Since
Feb 18, 2026