high7.5
CVE-2021-32982
Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers.
Impact
Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Automationdirect | C0-10dd1e-D Firmware | before 3.00 |
| Automationdirect | C0-10dd2e-D Firmware | before 3.00 |
| Automationdirect | C0-10dre-D Firmware | before 3.00 |
| Automationdirect | C0-10are-D Firmware | before 3.00 |
| Automationdirect | C0-11dd1e-D Firmware | before 3.00 |
| Automationdirect | C0-11dd2e-D Firmware | before 3.00 |
| Automationdirect | C0-11dre-D Firmware | before 3.00 |
| Automationdirect | C0-11are-D Firmware | before 3.00 |
| Automationdirect | C0-12dd1e-D Firmware | before 3.00 |
| Automationdirect | C0-12dd2e-D Firmware | before 3.00 |
| Automationdirect | C0-12dre-D Firmware | before 3.00 |
| Automationdirect | C0-12are-D Firmware | before 3.00 |