Unrated severityNVD Advisory· Published Apr 4, 2022· Updated Apr 16, 2025

Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information

CVE-2021-32982

Description

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.

Affected products

Automationdirect/Click Plus PLCllm-fuzzy
Range: <3.00
Automationdirect/CLICK PLC CPU Modulescpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-21-166-02mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000