Skip to content
OpenAdvisories
Critical ICSA-22-298-01 3 CVEs

Haas Controller

Published Oct 25, 2022 · Updated Oct 25, 2022

Vendor: Haas Product: Haas Controller

Summary

Successful exploitation of these vulnerabilities could allow an unauthorized attacker to cause denial-of-service of the production line, damage the tools used in the production line, introduce defects in pieces of the production line, and perform remote code execution.

Vulnerabilities 3

  • Critical 9.8
    CVE-2022-2474

    Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands”…

    Haas Haas CNC Controller
  • Critical 9.8
    CVE-2022-2475

    Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Comma…

    Haas Haas CNC Controller
  • Critical 9.1
    CVE-2022-41636

    Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted…

    Haas Haas CNC Controller

Revision history

  1. #1

    Publication Date

References