Critical severity9.1NVD Advisory· Published Oct 28, 2022· Updated Jun 17, 2026

CVE-2022-41636

Description

Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.

Affected products

Haas Controller/Ethernet Q Commandsllm-create
Range: = 100.20.000.1110
Haas Controller/Haas Controllerllm-create
Range: = 100.20.000.1110
Haas/Controllercpe-rescue
Range: Version 100.20.000.1110

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-298-01nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000