CVE-2021-32984: Automationdirect c0-10are-D Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization.

Affected products

• Automationdirect c0-10are-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-10dd1e-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-10dd2e-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-10dre-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-11are-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-11dd1e-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-11dd2e-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-11dre-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12are-1-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12are-2-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12are-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dd1e-1-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dd1e-2-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dd1e-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dd2e-1-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dd2e-2-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dd2e-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dre-1-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dre-2-D Firmware: before 3.00 (fixed in 3.00)
• Automationdirect c0-12dre-D Firmware: before 3.00 (fixed in 3.00)

Published 2022-04-04. Last modified 2026-06-17.