CVE-2022-41636

7.5 highEPSS 0.5%

High (7.5) in haascnc haas controller. EPSS 0.5% chance of exploitation in the next 30 days.

Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2022-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

haascnc:haas_controller

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-01
https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-01

Check your stack JSON