CVE-2021-32984

🗓️ 04 Apr 2022 19:45:55Reported by icscertType

All programming connections receive same unlocked privileges, leading to privilege escalation. Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 allow unauthorized project access

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-32984	5 Apr 202200:28	–	circl
CNNVD	CLICK PLC CPU Modules 授权问题漏洞	15 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-32984 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel	4 Apr 202219:45	–	cvelist
EUVD	EUVD-2021-19705	7 Oct 202500:30	–	euvd
ICS	Automation Direct CLICK PLC CPU Modules	15 Jun 202100:00	–	ics
NVD	CVE-2021-32984	4 Apr 202220:15	–	nvd
OSV	CVE-2021-32984	4 Apr 202220:15	–	osv
Prion	Authorization	4 Apr 202220:15	–	prion
RedhatCVE	CVE-2021-32984	22 May 202519:46	–	redhatcve
Vulnrichment	CVE-2021-32984 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel	4 Apr 202219:45	–	vulnrichment

NVD

Vulners

Node

automationdirect c0-10dd1e-d_firmwareRange<3.00

AND

automationdirect c0-10dd1e-dMatch-

Node

automationdirect c0-10dd2e-d_firmwareRange<3.00

AND

automationdirect c0-10dd2e-dMatch-

Node

automationdirect c0-10dre-d_firmwareRange<3.00

AND

automationdirect c0-10dre-dMatch-

Node

automationdirect c0-10are-d_firmwareRange<3.00

AND

automationdirect c0-10are-dMatch-

Node

automationdirect c0-11dd1e-d_firmwareRange<3.00

AND

automationdirect c0-11dd1e-dMatch-

Node

automationdirect c0-11dd2e-d_firmwareRange<3.00

AND

automationdirect c0-11dd2e-dMatch-

Node

automationdirect c0-11dre-d_firmwareRange<3.00

AND

automationdirect c0-11dre-dMatch-

Node

automationdirect c0-11are-d_firmwareRange<3.00

AND

automationdirect c0-11are-dMatch-

Node

automationdirect c0-12dd1e-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-dMatch-

Node

automationdirect c0-12dd2e-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-dMatch-

Node

automationdirect c0-12dre-d_firmwareRange<3.00

AND

automationdirect c0-12dre-dMatch-

Node

automationdirect c0-12are-d_firmwareRange<3.00

AND

automationdirect c0-12are-dMatch-

Node

automationdirect c0-12dd1e-1-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-1-dMatch-

Node

automationdirect c0-12dd2e-1-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-1-dMatch-

Node

automationdirect c0-12dre-1-d_firmwareRange<3.00

AND

automationdirect c0-12dre-1-dMatch-

Node

automationdirect c0-12are-1-d_firmwareRange<3.00

AND

automationdirect c0-12are-1-dMatch-

Node

automationdirect c0-12dd1e-2-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-2-dMatch-

Node

automationdirect c0-12dd2e-2-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-2-dMatch-

Node

automationdirect c0-12dre-2-d_firmwareRange<3.00

AND

automationdirect c0-12dre-2-dMatch-

Node

automationdirect c0-12are-2-d_firmwareRange<3.00

AND

automationdirect c0-12are-2-dMatch-

[
  {
    "product": "CLICK PLC CPU Modules: C0-1x CPUs",
    "vendor": "Automation Direct",
    "versions": [
      {
        "lessThan": "3.00",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-166-02

21 Nov 2024 06:08Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.00285

SSVC