Beveiligingsadvies

CVE-2025-55038

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-23 22:24:28
Laatst bijgewerkt 2025-09-24 14:07:38
Toegewezen door icscert
CVSS-score 7.6
Status PUBLISHED

Beschrijving

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intended authorization level.