D0-06aa Firmware vulnerabilities

2 known vulnerabilities in D0-06aa Firmware from AutomationDirect. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  DirectLOGIC D0-06 series CPUs: Uncontrolled Resource Consumption

  CVE-2022-2004Aug 31, 2022AutomationDirectEPSS 1.03%

  AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 se

• 9.1 Critical severity

  DirectLOGIC D0-06 series CPUs: Cleartext Transmission of Sensitive Information

  CVE-2022-2003Aug 31, 2022AutomationDirect

  AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue a