PT-2022-10173

Name of the Vulnerable Software and Affected Versions Automation Direct CLICK PLC CPU Modules versions prior to v3.00 Description The issue allows an attacker to connect to the PLC while an existing connection is already active, due to insufficient protection against additional software programmi...

PT-2022-10176

Name of the Vulnerable Software and Affected Versions Automation Direct CLICK PLC CPU Modules: C0-1x CPUs versions prior to v3.00 Description The issue allows an attacker to connect to the PLC and read the project without authorization during the time it is unlocked by an authorized user, resulti...

PT-2022-10172

Name of the Vulnerable Software and Affected Versions Automation Direct CLICK PLC CPU Modules: C0-1x CPUs versions prior to v3.00 Description The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was...

CVE-2021-32986: Authentication Bypass Using an Alternate Path or Channel

After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without...

CLICK PLC CPU Modules Authorization Issues and Vulnerabilities

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to 8 I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that stems fr...

Automation Direct CLICK PLC CPU Modules

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Automation Direct Equipment: CLICK PLC CPU modules Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Cleartext Transmission of Sensitive Information, Unprotected Storage of...

CLICK PLC CPU Modules security vulnerabilities

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to eight I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that allo...

CLICK PLC CPU Modules Authorization Issues and Vulnerabilities

CLICK PLC CPU Modules are Automation Direct's network devicesA single CLICK CPU Module can be connected to up to eight I/O modules to expand the number of system I/O and meet the needs of a specific application. An authorization issue vulnerability exists in Automation Direct CLICK PLC CPU Module...

CLICK PLC CPU Modules Authorization Issues and Vulnerabilities

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to 8 I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that results ...

CLICK PLC CPU Modules security vulnerabilities

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to eight I/O modules to expand the amount of system I/O and meet the needs of a specific application. Automation Direct CLICK PLC CPU Modules have a security vulnerability that allows an...