CVE-2025-58473

MediumCVSS 5.9

Published: 23/09/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

An improper resource shutdown or release vulnerability exists in the Click Plus C2-03CPU-2 device running firmware 3.60. An unauthenticated attacker can exhaust all available Click Programming Software sessions and cause a denial-of-service.

Risk Assessment

An attacker could block configuration and operation of the device, causing outages and loss of availability of the control system.

Recommendation

Update the device firmware to a patched version and restrict network access to programming and management interfaces.

Other vulnerabilities in Click Plus C2-03CPU-2

CVE-2025-57882Medium
An improper resource shutdown or release vulnerability was identified in the Click Plus C2-03CPU-2 device running firmware 3.60. An unauthenticated attacker can perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.

Original NVD description (English source)

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions of the Click Programming Software.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS