Skip to content
OpenAdvisories
High ICSA-22-167-02 1 CVE

AutomationDirect DirectLOGIC with Serial Communication

Published Jun 16, 2022 · Updated Jun 16, 2022

Vendor: Automation Direct Product: D0-05AA Product: D0-05AD Product: D0-05AR Product: D0-05DA Product: D0-05DD Product: D0-05DD-D Product: D0-05DR Product: D0-05DR-D Product: D0-06AA Product: D0-06AR Product: D0-06DA Product: D0-06DD1 Product: D0-06DD1-D Product: D0-06DD2 Product: D0-06DD2-D Product: D0-06DR Product: D0-06DR-D Product: D2-230 Product: D2-240 Product: D2-250 Product: D2-250-1 Product: D2-260 Product: D2-262 Product: D3-350 Product: D4-430 Product: D4-440 Product: D4-450 Product: D4-454 Product: F1-130AA +7 more

Summary

Successful exploitation of this vulnerability could cause a loss of sensitive information and unauthorized changes.

Vulnerabilities 1

  • High 7.7
    CVE-2022-2003

    AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission

    AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue …

    Automation Direct DirectLOGIC D0-06 series CPUs

Revision history

  1. #1

    ICSA-22-167-02 AutomationDirect DirectLOGIC with Serial Communication

References