CVE-2022-2485
Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.
- Score
- CVSS 3.1 9.6 Critical
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2022-08-31
- Last modified
- 2025-04-16
- Weaknesses
- CWE-319
Affected products
- Sio- Mb04ads (Automationdirect)
- Sio-mb04ads (Automationdirect)
- Sio-mb04ads Firmware (Automationdirect)
- Sio-mb04das (Automationdirect)
- Sio-mb04das Firmware (Automationdirect)
- Sio-mb04rtds (Automationdirect)
- Sio-mb04rtds Firmware (Automationdirect)
- Sio-mb04thms (Automationdirect)
- Sio-mb04thms Firmware (Automationdirect)
- Sio-mb08ads-1 (Automationdirect)
- Sio-mb08ads-1 Firmware (Automationdirect)
- Sio-mb08ads-2 (Automationdirect)
- Sio-mb08ads-2 Firmware (Automationdirect)
- Sio-mb08thms (Automationdirect)
- Sio-mb08thms Firmware (Automationdirect)
- Sio-mb12cdr (Automationdirect)
- Sio-mb12cdr Firmware (Automationdirect)
- Sio-mb16cdd2 (Automationdirect)
- Sio-mb16cdd2 Firmware (Automationdirect)
- Sio-mb16nd3 (Automationdirect)
- Sio-mb16nd3 Firmware (Automationdirect)
References
- https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05
