Lucene search
K

50 matches found

Cvelist
Cvelist
added 2022/08/31 3:59 p.m.22 views

CVE-2022-2003 AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC...

7.7CVSS9.3AI score0.00599EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/08/31 3:59 p.m.21 views

CVE-2022-2004 AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to...

7.5CVSS7.6AI score0.00827EPSS
Exploits0References1
CVE
CVE
added 2022/08/31 3:33 p.m.52 views

CVE-2022-2006

CVE-2022-2006 affects AutomationDirect C-more EA9 family (EA9-T6CL/EA9-T6CL-R/EA9-T7CL/EA9-T7CL-R/EA9-T8CL/EA9-T10CL/EA9-T10WCL/EA9-T12CL/EA9-T15CL/EA9-T15CL-R/EA9-RHMI/EA9-PGMSW) and DirectLOGIC prior to firmware 6.73. Root cause: DLL vulnerability in the install directory with an uncontrolled s...

7.8CVSS7.7AI score0.00337EPSS
Exploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2022/07/14 12:0 a.m.2 views

VulnCheck KEV: CVE-2022-2003

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect...

9.1CVSS7.4AI score0.00599EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.3 views

The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to the device.

The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the device by receiving a password packet in ...

7.8CVSS8AI score0.00599EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.3 views

The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted packet...

7.8CVSS7.2AI score0.00827EPSS
Exploits0References3Affected Software2
CNNVD
CNNVD
added 2022/06/17 12:0 a.m.3 views

AutomationDirect DirectLOGIC 安全漏洞

AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. A security vulnerability in AutomationDirect DirectLOGIC, which can be exploited by an attacker to cause loss of sensitive device information, unauthorized changes, and denial of service conditions, affect...

7.8CVSS7.3AI score0.00296EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2022/06/16 12:0 a.m.128 views

CVE-2022-2003

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC...

9.1CVSS5.1AI score0.00599EPSS
In wildExploits0References3
CNNVD
CNNVD
added 2022/06/16 12:0 a.m.2 views

AutomationDirect DirectLOGIC 资源管理错误漏洞

AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. AutomationDirect DirectLOGIC is vulnerable to a resource management error. An attacker could use this vulnerability to cause a denial of service situation by sending specially crafted packets to the PLC in...

7.5CVSS7.4AI score0.00827EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/06/16 12:0 a.m.2 views

AutomationDirect DirectLOGIC 安全漏洞

AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect DirectLOGIC that originates from an attack by a specially crafted serial message sent to the CPU serial port that causes the PLC to respond to the PLC...

9.1CVSS8.4AI score0.00599EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/06/16 12:0 a.m.4 views

PT-2022-3143 · Automationdirect · Automationdirect Directlogic D0-06 Series Cpus

Name of the Vulnerable Software and Affected Versions: AutomationDirect DirectLOGIC D0-06 series CPUs versions prior to 2.72 Description: The issue is related to a vulnerability that allows an attacker to access the device and make unauthorized changes by sending a specifically crafted serial...

9.1CVSS9.1AI score0.00599EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/06/16 12:0 a.m.3 views

PT-2022-3044 · Automationdirect · H0-Ecom +3

Name of the Vulnerable Software and Affected Versions: AutomationDirect DirectLOGIC D0-06 series CPUs versions prior to 2.72 Description: The issue is related to an uncontrolled resource consumption in the communication modules H0-ECOM and H0-ECOM100 Ethernet controllers of DirectLOGIC. An attack...

7.8CVSS7.3AI score0.00827EPSS
Exploits0References4
ICS
ICS
added 2022/06/16 12:0 a.m.55 views

AutomationDirect DirectLOGIC with Ethernet

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Ethernet Communication Modules Vulnerabilities: Uncontrolled Resource Consumption, Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED...

9.1CVSS9AI score0.00827EPSS
Exploits0References4
ICS
ICS
added 2022/06/16 12:0 a.m.78 views

AutomationDirect DirectLOGIC with Serial Communication

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Serial Communication Vulnerability: Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original...

9.1CVSS9.1AI score0.00599EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2019/08/02 12:0 a.m.10 views

Koyo Electronics DirectLOGIC DL06 CPU

Binary data 764752.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/08/02 12:0 a.m.14 views

Koyo Electronics DirectLOGIC DL06 CPU

Binary data 764753.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/08/02 12:0 a.m.15 views

Koyo Electronics DirectLOGIC DL05 CPU

Binary data 764750.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/08/02 12:0 a.m.13 views

Koyo Electronics DirectLOGIC DL06 CPU

Binary data 764758.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/08/02 12:0 a.m.12 views

Koyo Electronics DirectLOGIC DL06 CPU

Binary data 764756.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/08/02 12:0 a.m.10 views

Koyo Electronics DirectLOGIC DL05 CPU

Binary data 764748.prm...

7.3AI score
Exploits0
Rows per page
Query Builder