What is the CVSS score of CVE-2022-2003?

CVE-2022-2003 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.6%.

Is there a patch available for CVE-2022-2003?

Yes, a patch is available for CVE-2022-2003. Update the affected software to the latest version immediately.

D0 06Dd1 Firmware CVE-2022-2003

CRITICAL

Cleartext Transmission of Sensitive Information (CWE-319)

2022-08-31 ics-cert@hq.dhs.gov

Authentication Bypass D0 06Dd1 Firmware D0 06Dd2 Firmware D0 06Dr Firmware D0 06Da Firmware D0 06Ar Firmware D0 06Aa Firmware D0 06Dd1 D Firmware D0 06Dd2 D Firmware D0 06Dr D Firmware

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Aug 31, 2022 - 16:15 nvd

CRITICAL 9.1

DescriptionNVD

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-319. AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72; Affected products include: Automationdirect D0-06Dd1 Firmware, Automationdirect D0-06Dd2 Firmware, Automationdirect D0-06Dr Firmware, Automationdirect D0-06Da Firmware, Automationdirect D0-06Ar Firmware. Version information: prior to 2.72.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.