53 matches found
CVE-2022-2004
The CVE-2022-2004 issue affects AutomationDirect DirectLOGIC D0-06 series CPUs (including D0-06DD1/2/DR/DA/AR/AA and related D0-06DD1-D/D- variants) prior to firmware version 2.72. A specially crafted network packet can exhaust resources in Ethernet modules (H0-ECOM/H0-ECOM100 and related hardwar...
CVE-2022-2003
CVE-2022-2003 affects AutomationDirect DirectLOGIC D0-06 series CPUs (D0-06DD1/2/DR/DA/AR/AA and variants) with serial communication prior to firmware version 2.72. Root cause: a specially crafted serial message to the CPU serial port elicits the PLC to respond with the PLC password in cleartext,...
CVE-2022-2006
CVE-2022-2006 affects AutomationDirect C-more EA9 family (EA9-T6CL/EA9-T6CL-R/EA9-T7CL/EA9-T7CL-R/EA9-T8CL/EA9-T10CL/EA9-T10WCL/EA9-T12CL/EA9-T15CL/EA9-T15CL-R/EA9-RHMI/EA9-PGMSW) and DirectLOGIC prior to firmware 6.73. Root cause: DLL vulnerability in the install directory with an uncontrolled s...
CVE-2022-2004: Uncontrolled Resource Consumption
AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to...
CVE-2022-2003: Cleartext Transmission of Sensitive Information
AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC...
CVE-2022-2006: Uncontrolled Search Path Element
AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to...
VulnCheck KEV: CVE-2022-2003
AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC...
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to the device.
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the device by receiving a password packet in ...
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted packet...
AutomationDirect DirectLOGIC 安全漏洞
AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. A security vulnerability in AutomationDirect DirectLOGIC, which can be exploited by an attacker to cause loss of sensitive device information, unauthorized changes, and denial of service conditions, affect...
PT-2022-3143 · Automationdirect · Automationdirect Directlogic D0-06 Series Cpus
Name of the Vulnerable Software and Affected Versions: AutomationDirect DirectLOGIC D0-06 series CPUs versions prior to 2.72 Description: The issue is related to a vulnerability that allows an attacker to access the device and make unauthorized changes by sending a specifically crafted serial...
PT-2022-3044 · Automationdirect · H0-Ecom +3
Name of the Vulnerable Software and Affected Versions: AutomationDirect DirectLOGIC D0-06 series CPUs versions prior to 2.72 Description: The issue is related to an uncontrolled resource consumption in the communication modules H0-ECOM and H0-ECOM100 Ethernet controllers of DirectLOGIC. An attack...
CVE-2022-2003
AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC...
AutomationDirect DirectLOGIC 安全漏洞
AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect DirectLOGIC that originates from an attack by a specially crafted serial message sent to the CPU serial port that causes the PLC to respond to the PLC...
AutomationDirect DirectLOGIC 资源管理错误漏洞
AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. AutomationDirect DirectLOGIC is vulnerable to a resource management error. An attacker could use this vulnerability to cause a denial of service situation by sending specially crafted packets to the PLC in...
AutomationDirect DirectLOGIC with Serial Communication
1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Serial Communication Vulnerability: Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original...
AutomationDirect DirectLOGIC with Ethernet
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Ethernet Communication Modules Vulnerabilities: Uncontrolled Resource Consumption, Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED...
Koyo Electronics DirectLOGIC DL06 CPU
Binary data 764752.prm...