Unrated severityNVD Advisory· Published Oct 28, 2022· Updated Apr 16, 2025

CVE-2022-2474

Description

Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller (even while connected remotely) to access the service and write unauthorized macros to the device.

Affected products

Haas/Controllerllm-fuzzy2 versions
=100.20.000.1110+ 1 more
- (no CPE)range: =100.20.000.1110
- (no CPE)range: Version 100.20.000.1110

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.cisa.gov/uscert/ics/advisories/icsa-22-298-01mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000