Skip to content
ICS / SCADA

AutomationDirect CLICK PLUS PLC (C2-03CPU / C2-06CPU / C2-09CPU / C2-12CPU Series) — Default Password

Default username and password for the AutomationDirect CLICK PLUS PLC (C2-03CPU / C2-06CPU / C2-09CPU / C2-12CPU Series): (blank) / (blank). Learn how to log in and how to change the default credentials.

AutomationDirect CLICK PLUS PLCs (C2-03CPU, C2-06CPU, etc.) store credentials in cleartext and are vulnerable to authentication bypass via direct network interface access (CVE-2022-2005 / CVE-2022-2004 — ICSA-22-020-05). Earlier CLICK series (C0-xx CPUs) also have no authentication on the programming port by default. The Modbus/TCP interface (port 502) requires no authentication, allowing unauthenticated read/write of PLC registers.

UsuarioContraseñaAccesoNotas
(vacío / ninguno)
(vacío / ninguno)
APINo authentication on Modbus TCP (port 502) and programming port by default — ICSA-22-020-05 (CVE-2022-2004/2005)

Uso responsable

Esta base de datos enumera credenciales predeterminadas documentadas públicamente para que los administradores puedan encontrarlas y cambiarlas. Úsalas solo en sistemas que poseas o que estés autorizado a probar.

Dispositivos relacionados