Published: 31/08/2022 Updated: 06/09/2022

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Vulnerable Product	Search on Vulmon	Subscribe to Product
automationdirect sio-mb04rtds_firmware
automationdirect sio-mb04ads_firmware
automationdirect sio-mb04thms_firmware
automationdirect sio-mb08ads-1_firmware
automationdirect sio-mb08ads-2_firmware
automationdirect sio-mb08thms_firmware
automationdirect sio-mb04das_firmware
automationdirect sio-mb12cdr_firmware
automationdirect sio-mb16cdd2_firmware
automationdirect sio-mb16nd3_firmware

Critical Infrastructure Sectors: Commercial Facilities, Critical Manufacturing, Information Technology

CWE-319 https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05 https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf https://nvd.nist.gov https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-2485

Vulnerability Summary

Vulnerability Trend

ICS Advisories

References

Vulmon Search

About

Products

Connect