CVE-2022-2485: critical vulnerability in AutomationDirect SIO- MB04ADS
AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.6epss 0.5%
Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
AutomationDirect · SIO- MB04ADSAutomationDirect · SIO-MB04ADSAutomationDirect · SIO-MB04DASAutomationDirect · SIO-MB04RTDSAutomationDirect · SIO-MB04THMSAutomationDirect · SIO-MB08ADS-1AutomationDirect · SIO-MB08ADS-2AutomationDirect · SIO-MB08THMSAutomationDirect · SIO-MB12CDRAutomationDirect · SIO-MB16CDD2AutomationDirect · SIO-MB16ND3