CVE-2025-57882

MediumCVSS 5.9

Published: 23/09/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

An improper resource shutdown or release vulnerability was identified in the Click Plus C2-03CPU-2 device running firmware 3.60. An unauthenticated attacker can perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.

Risk Assessment

An unauthenticated attacker can block access to the control device, potentially disrupting industrial systems that depend on this controller.

Recommendation

Update the device firmware to a non-vulnerable version or restrict network access to the Remote PLC application according to the vendor's guidance.

Other vulnerabilities in Click Plus C2-03CPU-2

CVE-2025-58473Medium
An improper resource shutdown or release vulnerability exists in the Click Plus C2-03CPU-2 device running firmware 3.60. An unauthenticated attacker can exhaust all available Click Programming Software sessions and cause a denial-of-service.

Original NVD description (English source)

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS