CVE-2021-32986

CRITICAL

Automation Direct CLICK PLC CPU <3.00 - Privilege Escalation

Title source: llm

Description

After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_confirm

https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02

Scores

CVSS v3 9.8

EPSS 0.0104

EPSS Percentile 59.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-288 CWE-863

Status published

Products (20)

automationdirect/c0-10are-d_firmware < 3.00

automationdirect/c0-10dd1e-d_firmware < 3.00

automationdirect/c0-10dd2e-d_firmware < 3.00

automationdirect/c0-10dre-d_firmware < 3.00

automationdirect/c0-11are-d_firmware < 3.00

automationdirect/c0-11dd1e-d_firmware < 3.00

automationdirect/c0-11dd2e-d_firmware < 3.00

automationdirect/c0-11dre-d_firmware < 3.00

automationdirect/c0-12are-1-d_firmware < 3.00

automationdirect/c0-12are-2-d_firmware < 3.00

... and 10 more

Published Apr 04, 2022

Tracked Since Feb 18, 2026