← Database

CVE-2022-2485

CRITICAL CVSS: 9.6 Published: 2022-08-31 Modified: 2026-06-17

Description

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Affected Platforms

Automationdirect Sio-Mb16Nd3 FirmwareAutomationdirect Sio-Mb12CdrAutomationdirect Sio-Mb04Rtds FirmwareAutomationdirect Sio-Mb08Ads-2 FirmwareAutomationdirect Sio-Mb04AdsAutomationdirect Sio-Mb08Thms FirmwareAutomationdirect Sio-Mb16Nd3Automationdirect Sio-Mb04ThmsAutomationdirect Sio-Mb16Cdd2Automationdirect Sio-Mb16Cdd2 Firmware

Weakness Type

CWE-319, CWE-319

References