CVE-2021-32984: fallo crítico en Automation Direct CLICK PLC CPU Modules: C0-1x…
Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.8epss 1.1%
All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Automation Direct · CLICK PLC CPU Modules: C0-1x CPUsCVEs relacionadas — Automation Direct CLICK PLC CPU Modules: C0-1x…
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-32986CRITICALAutomation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or ChannelEPSS 1.1%CVE-2021-32980CRITICALAutomation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or ChannelEPSS 1.1%CVE-2021-32978HIGHAutomation Direct CLICK PLC CPU Modules Plaintext Storage of a PasswordEPSS 1.0%CVE-2021-32982HIGHAutomation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive InformationEPSS 0.7%