Critical severity9.6NVD Advisory· Published Aug 31, 2022· Updated Jun 17, 2026
CVE-2022-2485
CVE-2022-2485
Description
Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13- cpe:2.3:o:automationdirect:sio-mb04ads_firmware:*:*:*:*:*:*:*:*Range: <8.4.3.0
- cpe:2.3:o:automationdirect:sio-mb04das_firmware:*:*:*:*:*:*:*:*Range: <8.11.3.0
- cpe:2.3:o:automationdirect:sio-mb04rtds_firmware:*:*:*:*:*:*:*:*Range: <8.3.4.0
- cpe:2.3:o:automationdirect:sio-mb04thms_firmware:*:*:*:*:*:*:*:*Range: <8.5.4.0
- cpe:2.3:o:automationdirect:sio-mb08ads-1_firmware:*:*:*:*:*:*:*:*Range: <8.6.3.0
- cpe:2.3:o:automationdirect:sio-mb08ads-2_firmware:*:*:*:*:*:*:*:*Range: <8.7.3.0
- cpe:2.3:o:automationdirect:sio-mb08thms_firmware:*:*:*:*:*:*:*:*Range: <8.8.4.0
- cpe:2.3:o:automationdirect:sio-mb12cdr_firmware:*:*:*:*:*:*:*:*Range: <8.0.4.0
- cpe:2.3:o:automationdirect:sio-mb16cdd2_firmware:*:*:*:*:*:*:*:*Range: <8.1.4.0
- cpe:2.3:o:automationdirect:sio-mb16nd3_firmware:*:*:*:*:*:*:*:*Range: <8.2.4.0
B/N 4714432222+ 1 more
- (no CPE)range: B/N 4714432222
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdfnvdPatchVendor Advisory
- www.cisa.gov/uscert/ics/advisories/icsa-22-202-05nvdPatchThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.