After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs...
Critical severity
Unreviewed
Published
Apr 5, 2022
to the GitHub Advisory Database
•
Updated Jan 30, 2023
Description
Published by the National Vulnerability Database
Apr 4, 2022
Published to the GitHub Advisory Database
Apr 5, 2022
Last updated
Jan 30, 2023
After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly.
References