Vulnerabilities

TI-2022-01859 CVE-2022-2004 · GHSA-5pc3-4p3v-hv92

AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

MEDIUM 41

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01034 Published 2022-08-31 Fixed in 2.72 CWE-400

TI-2022-01858 CVE-2022-2003 · GHSA-cwvq-v3mj-c66c

AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission

MEDIUM 43

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0077 Published 2022-08-31 Fixed in 2.72 CWE-319

Vulnerabilities

Filters

AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission