AutomationDirect CLICK PLUS C0-0x CPU up to 3.70 KOPR Protocol authorization

Summaryinfo

A vulnerability described as problematic has been identified in AutomationDirect CLICK PLUS C0-0x CPU, CLICK PLUS C0-1x CPU and CLICK PLUS C2-x CPU up to 3.70. This affects an unknown function of the component KOPR Protocol Handler. Such manipulation leads to authorization. This vulnerability is uniquely identified as CVE-2025-55038. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in AutomationDirect CLICK PLUS C0-0x CPU, CLICK PLUS C0-1x CPU and CLICK PLUS C2-x CPU up to 3.70 and classified as problematic. Affected by this issue is an unknown code block of the component KOPR Protocol Handler. The manipulation with an unknown input leads to a authorization vulnerability. Using CWE to declare the problem leads to CWE-862. The product does not perform an authorization check when an actor attempts to access a resource or perform an action. Impacted is confidentiality, integrity, and availability. CVE summarizes:

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.

The weakness was disclosed by Luca Borzacchiello and Diego Zaffaroni as icsa-25-266-01. The advisory is shared for download at cisa.gov. This vulnerability is handled as CVE-2025-55038 since 09/16/2025. The exploitation is known to be difficult. The attack may be launched remotely. There are neither technical details nor an exploit publicly available.

Upgrading to version 3.71 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Chip Software

Vendor

• AutomationDirect

Name

• CLICK PLUS C0-0x CPU
• CLICK PLUS C0-1x CPU
• CLICK PLUS C2-x CPU

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6
• 3.7
• 3.8
• 3.9
• 3.10
• 3.11
• 3.12
• 3.13
• 3.14
• 3.15
• 3.16
• 3.17
• 3.18
• 3.19
• 3.20
• 3.21
• 3.22
• 3.23
• 3.24
• 3.25
• 3.26
• 3.27
• 3.28
• 3.29
• 3.30
• 3.31
• 3.32
• 3.33
• 3.34
• 3.35
• 3.36
• 3.37
• 3.38
• 3.39
• 3.40
• 3.41
• 3.42
• 3.43
• 3.44
• 3.45
• 3.46
• 3.47
• 3.48
• 3.49
• 3.50
• 3.51
• 3.52
• 3.53
• 3.54
• 3.55
• 3.56
• 3.57
• 3.58
• 3.59
• 3.60
• 3.61
• 3.62
• 3.63
• 3.64
• 3.65
• 3.66
• 3.67
• 3.68
• 3.69
• 3.70

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion