PT-2025-39221 · Unknown · Click Programming Software V3.60

Published 2025-09-23 · Updated 2025-09-23 · CVE-2025-54855

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Click Programming Software version v3.60

Description A security issue allows a local user, while an administrator session is active, to steal credentials stored in clear text. The issue involves the cleartext storage of sensitive information and can be exploited by gaining access to the file system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-54855

Affected Products

Click Programming Software V3.60

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-54855 · Security Note
• https://t.me/CVEtracker/33209 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-266-01 · Note
• https://twitter.com/CVEnew/status/1970621779401183452 · Twitter Post
• https://t.me/cveNotify/136217 · Telegram Post
• https://automationdirect.com/support/software-downloads · Note