AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-32986

CRITICAL · CVSS 9.8 EPSS 1.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-32986
Severity
CRITICAL
CVSS
9.8
EPSS
1.10%

Original NVD Description

After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly.