Advisories · Technology

Haas CNC Controller.

Every CVE that names Haas CNC Controller among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-41636 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cleartext transmission of sensitive information in Haas CNC Controller
- Haas CNC Controller
- Weak cryptography or TLS
Not analysed yet 28 Oct 2022
CVE-2022-2475 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.
- Haas CNC Controller
- CWE-1220
Not analysed yet 28 Oct 2022
CVE-2022-2474 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Haas CNC Controller
- Haas CNC Controller
- Authentication bypass
Not analysed yet 28 Oct 2022