CVE-2021-32978

🗓️ 04 Apr 2022 19:45:53Reported by icscertType

The protocol of Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware <v3.00 allows reading of the previously entered password and lock state

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-32978	5 Apr 202200:28	–	circl
CNNVD	CLICK PLC CPU Modules 安全漏洞	15 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-32978 Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password	4 Apr 202219:45	–	cvelist
EUVD	EUVD-2021-19699	7 Oct 202500:30	–	euvd
ICS	Automation Direct CLICK PLC CPU Modules	15 Jun 202100:00	–	ics
NVD	CVE-2021-32978	4 Apr 202220:15	–	nvd
OSV	CVE-2021-32978	4 Apr 202220:15	–	osv
Prion	Design/Logic Flaw	4 Apr 202220:15	–	prion
RedhatCVE	CVE-2021-32978	22 May 202519:46	–	redhatcve
Vulnrichment	CVE-2021-32978 Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password	4 Apr 202219:45	–	vulnrichment

NVD

Vulners

Node

automationdirect c0-10dd1e-d_firmwareRange<3.00

AND

automationdirect c0-10dd1e-dMatch-

Node

automationdirect c0-10dd2e-d_firmwareRange<3.00

AND

automationdirect c0-10dd2e-dMatch-

Node

automationdirect c0-10dre-d_firmwareRange<3.00

AND

automationdirect c0-10dre-dMatch-

Node

automationdirect c0-10are-d_firmwareRange<3.00

AND

automationdirect c0-10are-dMatch-

Node

automationdirect c0-11dd1e-d_firmwareRange<3.00

AND

automationdirect c0-11dd1e-dMatch-

Node

automationdirect c0-11dd2e-d_firmwareRange<3.00

AND

automationdirect c0-11dd2e-dMatch-

Node

automationdirect c0-11dre-d_firmwareRange<3.00

AND

automationdirect c0-11dre-dMatch-

Node

automationdirect c0-11are-d_firmwareRange<3.00

AND

automationdirect c0-11are-dMatch-

Node

automationdirect c0-12dd1e-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-dMatch-

Node

automationdirect c0-12dd2e-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-dMatch-

Node

automationdirect c0-12dre-d_firmwareRange<3.00

AND

automationdirect c0-12dre-dMatch-

Node

automationdirect c0-12are-d_firmwareRange<3.00

AND

automationdirect c0-12are-dMatch-

Node

automationdirect c0-12dd1e-1-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-1-dMatch-

Node

automationdirect c0-12dd2e-1-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-1-dMatch-

Node

automationdirect c0-12dre-1-d_firmwareRange<3.00

AND

automationdirect c0-12dre-1-dMatch-

Node

automationdirect c0-12are-1-d_firmwareRange<3.00

AND

automationdirect c0-12are-1-dMatch-

Node

automationdirect c0-12dd1e-2-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-2-dMatch-

Node

automationdirect c0-12dd2e-2-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-2-dMatch-

Node

automationdirect c0-12dre-2-d_firmwareRange<3.00

AND

automationdirect c0-12dre-2-dMatch-

Node

automationdirect c0-12are-2-d_firmwareRange<3.00

AND

automationdirect c0-12are-2-dMatch-

[
  {
    "product": "CLICK PLC CPU Modules: C0-1x CPUs",
    "vendor": "Automation Direct",
    "versions": [
      {
        "lessThan": "3.00",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-166-02

21 Nov 2024 06:08Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.0022

SSVC