Haascnc Haas_controller
3 CVEs affecting Haascnc Haas_controller. Latest disclosed: 2022-10-28. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2475 | Critical | 9.8 | 2022-10-28 | Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. Any user is able to write… |
CVE-2022-2474 | Critical | 9.8 | 2022-10-28 | Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the s… |
CVE-2022-41636 | Critical | 9.1 | 2022-10-28 | Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker t… |