Skip to content
Fencer Intel
high 7.7

CVE-2022-2003 json

AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission

published 2022-08-31 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-34309

cvss
7.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 55%
public exploits
0
none known

Summary

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Patch / fix

  • AutomationDirect DirectLOGIC D0-06 series CPUs 2.72

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-22-167-02 updated cvss 7.7

AutomationDirect DirectLOGIC with Serial Communication

  • Automation Direct D0-05AA < V5.41 Automation Direct D0-05AD < V5.41 Automation Direct D0-05AR < V5.41 Automation Direct D0-05DA < V5.41 Automation Direct D0-05DD < V5.41 Automation Direct D0-05DD-D < V5.41
    +30 more products
    Automation Direct D0-05DR < V5.41 Automation Direct D0-05DR-D < V5.41 Automation Direct D0-06AA < 2.72 Automation Direct D0-06AR < 2.72 Automation Direct D0-06DA < 2.72 Automation Direct D0-06DD1 < 2.72 Automation Direct D0-06DD1-D < 2.72 Automation Direct D0-06DD2 < 2.72 Automation Direct D0-06DD2-D < 2.72 Automation Direct D0-06DR < 2.72 Automation Direct D0-06DR-D < 2.72 Automation Direct D2-230 Automation Direct D2-240 Automation Direct D2-250 Automation Direct D2-250-1 < V4.91 Automation Direct D2-260 < V2.71 Automation Direct D2-262 < V1.06 Automation Direct D3-350 Automation Direct D4-430 Automation Direct D4-440 Automation Direct D4-450 Automation Direct D4-454 < V1.04 Automation Direct F1-130AA Automation Direct F1-130AD Automation Direct F1-130AR Automation Direct F1-130DA Automation Direct F1-130DD Automation Direct F1-130DD-D Automation Direct F1-130DR Automation Direct F1-130DR-D
    affected: mitigation “Update all D0-06 series CPUs to firmware version 2.72 or later” automationdirect.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-22-167-03 updated cvss 7.5

AutomationDirect DirectLOGIC with Ethernet

  • Automation Direct D0-05AA < 5.41 Automation Direct D0-05AD < 5.41 Automation Direct D0-05AR < 5.41 Automation Direct D0-05DA < 5.41 Automation Direct D0-05DD < 5.41 Automation Direct D0-05DD-D < 5.41
    +20 more products
    Automation Direct D0-05DR < 5.41 Automation Direct D0-05DR-D < 5.41 Automation Direct D0-06AA < 2.72 Automation Direct D0-06AR < 2.72 Automation Direct D0-06DA < 2.72 Automation Direct D0-06DD1 < 2.72 Automation Direct D0-06DD1-D < 2.72 Automation Direct D0-06DD2 < 2.72 Automation Direct D0-06DD2-D < 2.72 Automation Direct D0-06DR < 2.72 Automation Direct D0-06DR-D < 2.72 Automation Direct D2-240 Automation Direct D2-250 Automation Direct D2-250-1 < 4.91 Automation Direct D2-260 < 2.71 Automation Direct D2-262 < 1.06 Automation Direct D4-430 Automation Direct D4-440 Automation Direct D4-450 Automation Direct D4-454 < 1.04
    affected: vendor fix, mitigation “For CVE-2022-2003: Update all D0-06 series CPUs to firmware version 2.72 or later” automationdirect.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
18 mo ago

Exploit prediction

0.77% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

  • AutomationDirect DirectLOGIC D0-06 series CPUs

Classification

Weakness
  • CWE-319 Cleartext Transmission of Sensitive Information

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.