Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-04	CVE-2021-32986	Incorrect Authorization vulnerability in Automationdirect products After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. network low complexity automationdirect CWE-863 critical	9.8
2022-04-04	CVE-2021-32984	Improper Authentication vulnerability in Automationdirect products All programming connections receive the same unlocked privileges, which can result in a privilege escalation. network low complexity automationdirect CWE-287 critical	9.8
2022-04-04	CVE-2021-32980	Improper Authentication vulnerability in Automationdirect products Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. network low complexity automationdirect CWE-287 critical	9.8