1. Home
  2. CVE Database
  3. CVE-2021-32982
HIGH · 7.5

CVE-2021-32982

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can obse...

Vulnerability Description

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
AutomationdirectC0-10Dd1E-D Firmware< 3.00
AutomationdirectC0-10Dd1E-D-
AutomationdirectC0-10Dd2E-D Firmware< 3.00
AutomationdirectC0-10Dd2E-D-
AutomationdirectC0-10Dre-D Firmware< 3.00
AutomationdirectC0-10Dre-D-
AutomationdirectC0-10Are-D Firmware< 3.00
AutomationdirectC0-10Are-D-
AutomationdirectC0-11Dd1E-D Firmware< 3.00
AutomationdirectC0-11Dd1E-D-
AutomationdirectC0-11Dd2E-D Firmware< 3.00
AutomationdirectC0-11Dd2E-D-
AutomationdirectC0-11Dre-D Firmware< 3.00
AutomationdirectC0-11Dre-D-
AutomationdirectC0-11Are-D Firmware< 3.00
AutomationdirectC0-11Are-D-
AutomationdirectC0-12Dd1E-D Firmware< 3.00
AutomationdirectC0-12Dd1E-D-
AutomationdirectC0-12Dd2E-D Firmware< 3.00
AutomationdirectC0-12Dd2E-D-

Related Weaknesses (CWE)

CWE-319

References

FAQ

What is CVE-2021-32982?

CVE-2021-32982 is a vulnerability with a CVSS score of 7.5 (HIGH). Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can obse...

How severe is CVE-2021-32982?

CVE-2021-32982 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-32982?

Check the references section above for vendor advisories and patch information. Affected products include: Automationdirect C0-10Dd1E-D Firmware, Automationdirect C0-10Dd1E-D, Automationdirect C0-10Dd2E-D Firmware, Automationdirect C0-10Dd2E-D, Automationdirect C0-10Dre-D Firmware.