ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-32982

—
CVSS 3.1
7.5 high
EPSS
<1%p49
Published
()
Modified
Description

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.

Vendors
automationdirect
Products
c0-10dd1e-d firmware, c0-10dd2e-d firmware, c0-10dre-d firmware, c0-10are-d firmware, c0-11dd1e-d firmware, c0-11dd2e-d firmware, c0-11dre-d firmware, c0-11are-d firmware, c0-12dd1e-d firmware, c0-12dd2e-d firmware, c0-12dre-d firmware, c0-12are-d firmware
Weakness
CWE-319
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

No ingested article mentions this CVE yet.