1. Home
  2. CVE Database
  3. CVE-2021-32980
CRITICAL · 9.8

CVE-2021-32980

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an exist...

Vulnerability Description

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AutomationdirectC0-10Dd1E-D Firmware< 3.00
AutomationdirectC0-10Dd1E-D-
AutomationdirectC0-10Dd2E-D Firmware< 3.00
AutomationdirectC0-10Dd2E-D-
AutomationdirectC0-10Dre-D Firmware< 3.00
AutomationdirectC0-10Dre-D-
AutomationdirectC0-10Are-D Firmware< 3.00
AutomationdirectC0-10Are-D-
AutomationdirectC0-11Dd1E-D Firmware< 3.00
AutomationdirectC0-11Dd1E-D-
AutomationdirectC0-11Dd2E-D Firmware< 3.00
AutomationdirectC0-11Dd2E-D-
AutomationdirectC0-11Dre-D Firmware< 3.00
AutomationdirectC0-11Dre-D-
AutomationdirectC0-11Are-D Firmware< 3.00
AutomationdirectC0-11Are-D-
AutomationdirectC0-12Dd1E-D Firmware< 3.00
AutomationdirectC0-12Dd1E-D-
AutomationdirectC0-12Dd2E-D Firmware< 3.00
AutomationdirectC0-12Dd2E-D-

Related Weaknesses (CWE)

CWE-287CWE-288

References

FAQ

What is CVE-2021-32980?

CVE-2021-32980 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an exist...

How severe is CVE-2021-32980?

CVE-2021-32980 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-32980?

Check the references section above for vendor advisories and patch information. Affected products include: Automationdirect C0-10Dd1E-D Firmware, Automationdirect C0-10Dd1E-D, Automationdirect C0-10Dd2E-D Firmware, Automationdirect C0-10Dd2E-D, Automationdirect C0-10Dre-D Firmware.