GCVE - cpe:2.3:h:automationdirect:c0-12dre-2-d:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:automationdirect:c0-12dre-2-d:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Automationdirect (`5dd60aaf-eea3-5732-9a9c-5b671c0ed914`)
Product	C0 12Dre 2 D (`e5d06de1-ad56-505d-b7b9-2d9d5f5d1ce6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-32986`	not_vulnerable	2026-06-03 14:44:40.641599	Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel CRITICAL (9.8) After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly. Published: 2022-04-04T19:45:56.000Z Updated: 2025-04-16T16:31:33.851Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32984`	not_vulnerable	2026-06-03 14:44:40.639465	Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel CRITICAL (9.8) All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization. Published: 2022-04-04T19:45:55.000Z Updated: 2025-04-16T16:31:41.100Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32982`	not_vulnerable	2026-06-03 14:44:40.637608	Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information HIGH (7.5) Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange. Published: 2022-04-04T19:45:57.000Z Updated: 2025-04-16T16:31:26.622Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32980`	not_vulnerable	2026-06-03 14:44:40.635410	Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel CRITICAL (9.8) Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active. Published: 2022-04-04T19:45:52.000Z Updated: 2025-04-16T16:31:57.000Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32978`	not_vulnerable	2026-06-03 14:44:40.631522	Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password HIGH (7.5) The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00. Published: 2022-04-04T19:45:53.000Z Updated: 2025-04-16T16:31:49.023Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.