← Database

CVE-2022-41636

CRITICAL CVSS: 9.1 Published: 2022-10-28 Modified: 2026-06-17

Description

Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.

Affected Platforms

Haascnc Haas Controller

Weakness Type

CWE-319, CWE-319

References