CVE-2021-32986

🗓️ 04 Apr 2022 19:45:56Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 110 Views

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 remain unlocked after interruption, allowing unauthorized access

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-32986	5 Apr 202200:28	–	circl
CNNVD	CLICK PLC CPU Modules 授权问题漏洞	15 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-32986 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel	4 Apr 202219:45	–	cvelist
EUVD	EUVD-2021-19707	7 Oct 202500:30	–	euvd
ICS	Automation Direct CLICK PLC CPU Modules	15 Jun 202100:00	–	ics
NVD	CVE-2021-32986	4 Apr 202220:15	–	nvd
OSV	CVE-2021-32986	4 Apr 202220:15	–	osv
Prion	Authentication flaw	4 Apr 202220:15	–	prion
Positive Technologies	PT-2022-10178 · Automationdirect · Automation Direct Click Plc Cpu Modules	4 Apr 202200:00	–	ptsecurity
RedhatCVE	CVE-2021-32986	22 May 202521:18	–	redhatcve

NVD

Vulners

Node

automationdirect c0-10dd1e-d_firmwareRange<3.00

AND

automationdirect c0-10dd1e-dMatch-

Node

automationdirect c0-10dd2e-d_firmwareRange<3.00

AND

automationdirect c0-10dd2e-dMatch-

Node

automationdirect c0-10dre-d_firmwareRange<3.00

AND

automationdirect c0-10dre-dMatch-

Node

automationdirect c0-10are-d_firmwareRange<3.00

AND

automationdirect c0-10are-dMatch-

Node

automationdirect c0-11dd1e-d_firmwareRange<3.00

AND

automationdirect c0-11dd1e-dMatch-

Node

automationdirect c0-11dd2e-d_firmwareRange<3.00

AND

automationdirect c0-11dd2e-dMatch-

Node

automationdirect c0-11dre-d_firmwareRange<3.00

AND

automationdirect c0-11dre-dMatch-

Node

automationdirect c0-11are-d_firmwareRange<3.00

AND

automationdirect c0-11are-dMatch-

Node

automationdirect c0-12dd1e-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-dMatch-

Node

automationdirect c0-12dd2e-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-dMatch-

Node

automationdirect c0-12dre-d_firmwareRange<3.00

AND

automationdirect c0-12dre-dMatch-

Node

automationdirect c0-12are-d_firmwareRange<3.00

AND

automationdirect c0-12are-dMatch-

Node

automationdirect c0-12dd1e-1-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-1-dMatch-

Node

automationdirect c0-12dd2e-1-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-1-dMatch-

Node

automationdirect c0-12dre-1-d_firmwareRange<3.00

AND

automationdirect c0-12dre-1-dMatch-

Node

automationdirect c0-12are-1-d_firmwareRange<3.00

AND

automationdirect c0-12are-1-dMatch-

Node

automationdirect c0-12dd1e-2-d_firmwareRange<3.00

AND

automationdirect c0-12dd1e-2-dMatch-

Node

automationdirect c0-12dd2e-2-d_firmwareRange<3.00

AND

automationdirect c0-12dd2e-2-dMatch-

Node

automationdirect c0-12dre-2-d_firmwareRange<3.00

AND

automationdirect c0-12dre-2-dMatch-

Node

automationdirect c0-12are-2-d_firmwareRange<3.00

AND

automationdirect c0-12are-2-dMatch-

[
  {
    "product": "CLICK PLC CPU Modules: C0-1x CPUs",
    "vendor": "Automation Direct",
    "versions": [
      {
        "lessThan": "3.00",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-166-02

21 Nov 2024 06:08Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.00285

SSVC