Haas Controller
Successful exploitation of these vulnerabilities could allow an unauthorized attacker to cause denial-of-service of the production line, damage the tools used in the production line, introduce defects in pieces of the production line, and perform remote code execution.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-41636US | high7.5OT erhöht | — | ||
Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive in… | ||||
| CVE-2022-2475US | high8.8 | — | ||
Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. Any user is able to write macros into registers… | ||||
| CVE-2022-2474US | high8.0OT erhöht | — | ||
Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (3)
- MitigationHaas Controller
Add authentication to the “Ethernet Q Commands” service and use a strong enforced password.
- MitigationHaas Controller
Add authentication to the “Ethernet Q Commands” service and use a strong enforced password.
- MitigationHaas Controller
Add authentication to the “Ethernet Q Commands” service and use a strong enforced password.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan