Логотип exploitDog
bind:CVE-2025-55038
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-55038

Количество 2

Количество 2

nvd логотип

CVE-2025-55038

около 2 месяцев назад

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.

CVSS3: 6.8
EPSS: Низкий
github логотип

GHSA-28rh-fv64-h63q

около 2 месяцев назад

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.

CVSS3: 6.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-55038

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.

CVSS3: 6.8
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-28rh-fv64-h63q

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.

CVSS3: 6.8
0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу