CVE-2021-32982CWE-319

Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information

High · published April 4, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00651 · 50.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2022-04-04T19:45Z
EPSS history
Timeline
  • 04 APR 19:45Z
    Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information
    cvelistv5