AutomationDirect Click Plus C2-03CPU-2 Improper Resource Shutdown Vulnerability Allowing Denial-of-Service

A denial-of-service vulnerability has been identified in the AutomationDirect Click Plus C2-03CPU-2 device running firmware version 3.60. This vulnerability allows an unauthenticated attacker to exhaust all available device sessions of the Click Programming Software, causing a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition by exhausting all available device sessions in the Click Programming Software, causing disruption in communication with the affected device.

Remediation

Users are advised to update the Click Plus C2-03CPU-2 device firmware to version 3.80. If the update cannot be applied immediately, it is recommended to isolate the device from external networks, restrict access to authorized personnel only, and use trusted internal networks for communication with the device.