CVE:CVE-2022-2003
CNNVD:CNNVD-202206-1638
AutomationDirect DirectLOGIC是美国AutomationDirect公司的一种可编程逻辑控制器。
AutomationDirect DirectLOGIC存在安全漏洞，该漏洞源于受到发送到CPU串行端口的特制串行消息的攻击，该消息将导致PLC以明文形式响应PLC密码。
solution:Upgrade automationdirect d0-06dd1_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06dd2_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06dr_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06da_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06ar_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06aa_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06dd1-d_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06dd2-d_firmware to a higher version than 2.72,and avoid the version (,2.72); Upgrade automationdirect d0-06dr-d_firmware to a higher version than 2.72,and avoid the version (,2.72)