CVE-2022-2004: Automationdirect d0-06aa Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Affected products

• Automationdirect d0-06aa Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06ar Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06da Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06dd1-D Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06dd1 Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06dd2-D Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06dd2 Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06dr-D Firmware: before 2.72 (fixed in 2.72)
• Automationdirect d0-06dr Firmware: before 2.72 (fixed in 2.72)

Published 2022-08-31. Last modified 2026-06-17.