Skip to content
OpenAdvisories
Critical · 9.6 CVE-2022-2485 EUVD-2022-34744GHSA-grjv-rc2c-54r5

AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

Published Aug 31, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Automation Direct Product: SIO- MB04ADS Product: SIO-MB04DAS Product: SIO-MB04RTDS Product: SIO-MB04THMS Product: SIO-MB08ADS-1 Product: SIO-MB08ADS-2 Product: SIO-MB08THMS Product: SIO-MB12CDR Product: SIO-MB16CDD2 Product: SIO-MB16ND3

Description

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Affected products

VendorProductAffectedFixed
AutomationDirect SIO-MB04RTDS unspecified – < 8.3.4.0 8.3.4.0
AutomationDirect SIO- MB04ADS unspecified – < 8.4.3.0 8.4.3.0
AutomationDirect SIO-MB04THMS unspecified – < 8.5.4.0, B/N 57141862221 8.5.4.0
AutomationDirect SIO-MB08ADS-1 unspecified – < 8.6.3.0 8.6.3.0
AutomationDirect SIO-MB08ADS-2 unspecified – < 8.7.3.0 8.7.3.0
AutomationDirect SIO-MB08THMS unspecified – < 8.8.4.0 8.8.4.0
AutomationDirect SIO-MB04DAS unspecified – < 8.11.3.0, B/N 4714432222 8.11.3.0
AutomationDirect SIO-MB12CDR unspecified – < 8.0.4.0, batch number (B/N) 5714442222 8.0.4.0
AutomationDirect SIO-MB16CDD2 unspecified – < 8.1.4.0 8.1.4.0
AutomationDirect SIO-MB16ND3 unspecified – < 8.2.4.00 8.2.4.00
AutomationDirect SIO-MB04ADS B/N 5714442222 —

Advisories 1

References