CVE-2022-41636

Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.

Score

CVSS 3.1 9.1 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-10-28

Last modified

2025-04-16

Weaknesses

CWE-319

Affected products

• Haas Cnc Controller (Haas)
• Haas Controller (Haascnc)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-01