Description
All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Automation Direct | CLICK PLC CPU Modules: C0-1x CPUs | unspecified – < 3.00 | 3.00 |
Advisories 1
- ICSA-21-166-02 Automation Direct CLICK PLC CPU Modules CISA ICS & IT advisories · Jun 15, 2021