AutomationDirect CLICK PLUS PLC (C2-03CPU / C2-06CPU / C2-09CPU / C2-12CPU Series) — Default Password
Default username and password for the AutomationDirect CLICK PLUS PLC (C2-03CPU / C2-06CPU / C2-09CPU / C2-12CPU Series): (blank) / (blank). Learn how to log in and how to change the default credentials.
AutomationDirect CLICK PLUS PLCs (C2-03CPU, C2-06CPU, etc.) store credentials in cleartext and are vulnerable to authentication bypass via direct network interface access (CVE-2022-2005 / CVE-2022-2004 — ICSA-22-020-05). Earlier CLICK series (C0-xx CPUs) also have no authentication on the programming port by default. The Modbus/TCP interface (port 502) requires no authentication, allowing unauthenticated read/write of PLC registers.
| Username | Password | Access | Notes |
|---|---|---|---|
(blank / none) | (blank / none) | API | No authentication on Modbus TCP (port 502) and programming port by default — ICSA-22-020-05 (CVE-2022-2004/2005) |
Responsible use
This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.
Related devices
USER/USERFTP∅/∅Consoleadmin/∅Web UIadmin/∅Web UIadmin/wagoWeb UIadmin/adminWeb UI