CVE-2022-2003

High

Description

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

SeverityHigh

CVSS7.7

Exploit probability—

ProductAutomationdirect D0-06dd1 Firmware

PublishedAug 31, 2022

First seenAug 31, 2022

Weakness typeCWE-319CWE-319

How to fix

Update

automationdirect d0-06dd1_firmware2.72 or later
automationdirect d0-06dd2_firmware2.72 or later
automationdirect d0-06dr_firmware2.72 or later
automationdirect d0-06da_firmware2.72 or later
automationdirect d0-06ar_firmware2.72 or later
automationdirect d0-06aa_firmware2.72 or later
automationdirect d0-06dd1-d_firmware2.72 or later
automationdirect d0-06dd2-d_firmware2.72 or later
automationdirect d0-06dr-d_firmware2.72 or later

Affected products

Product	Affected versions	Fixed in
automationdirect d0-06dd1_firmware	v < 2.72	2.72
automationdirect d0-06dd2_firmware	v < 2.72	2.72
automationdirect d0-06dr_firmware	v < 2.72	2.72
automationdirect d0-06da_firmware	v < 2.72	2.72
automationdirect d0-06ar_firmware	v < 2.72	2.72
automationdirect d0-06aa_firmware	v < 2.72	2.72
automationdirect d0-06dd1-d_firmware	v < 2.72	2.72
automationdirect d0-06dd2-d_firmware	v < 2.72	2.72
automationdirect d0-06dr-d_firmware	v < 2.72	2.72

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.