Critical · published April 4, 2022
🚨 A programming session that doesn’t timeout is a hacker's dream! With Automation Direct CLICK PLCs running outdated firmware, once unlocked, they stay that way indefinitely until you power cycle them! 🔥 Think of it as leaving your front door wide open after inviting a friend in for tea. If you walk away and forget to lock it, anyone can stroll right inside and do whatever they want while you’re fixing a snack! An attacker could gain unauthorized access to control systems, change configurations, or even disrupt critical operations. This could lead to disastrous outcomes in environments relying on these PLCs, from industrial processes to safety systems—definitely not the kind of surprise anyone wants!
Think of it as leaving your front door wide open after inviting a friend in for tea. If you walk away and forget to lock it, anyone can stroll right inside and do whatever they want while you’re fixing a snack! This vulnerability allows an authorized user to keep the PLC unlocked indefinitely after an interruption in programming, meaning that anyone with access to the software can connect without needing to re-authenticate.
An attacker could gain unauthorized access to control systems, change configurations, or even disrupt critical operations. This could lead to disastrous outcomes in environments relying on these PLCs, from industrial processes to safety systems—definitely not the kind of surprise anyone wants! Immediate action required! Update the firmware on your CLICK PLCs to version 3.00 or higher. Also, ensure that your programming protocols include a proper disconnection procedure to avoid leaving the system unlocked. You've got this! Follow these steps and keep your systems safe and sound. 🛡️