Skip to content
OpenAdvisories
Critical ICSA-21-166-02 5 CVEs

Automation Direct CLICK PLC CPU Modules

Published Jun 15, 2021 · Updated Jun 15, 2021

Vendor: Automation Direct Product: CLICK PLC CPU Modules

Summary

Successful exploitation of these vulnerabilities could allow an attacker to log in as a currently or previously authenticated user or discover passwords for valid users.

Vulnerabilities 5

  • Critical 9.8
    CVE-2021-32980

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active.

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
  • Critical 9.8
    CVE-2021-32984

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can c…

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
  • Critical 9.8
    CVE-2021-32986

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming con…

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
  • High 7.5
    CVE-2021-32978

    Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password

    The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs…

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
  • High 7.5
    CVE-2021-32982

    Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs

Revision history

  1. #1

    ICSA-21-166-02 Automation Direct CLICK PLC CPU Modules

References