Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2022-2485

AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

Description

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AutomationDirect SIO-MB04RTDS

  • unspecified to < 8.3.4.0affected

AutomationDirect SIO- MB04ADS

  • unspecified to < 8.4.3.0affected

AutomationDirect SIO-MB04THMS

  • unspecified to < 8.5.4.0affected

AutomationDirect SIO-MB08ADS-1

  • unspecified to < 8.6.3.0affected

AutomationDirect SIO-MB08ADS-2

  • unspecified to < 8.7.3.0affected

AutomationDirect SIO-MB08THMS

  • unspecified to < 8.8.4.0affected

AutomationDirect SIO-MB04DAS

  • unspecified to < 8.11.3.0affected

AutomationDirect SIO-MB12CDR

  • unspecified to < 8.0.4.0affected

AutomationDirect SIO-MB16CDD2

  • unspecified to < 8.1.4.0affected

AutomationDirect SIO-MB16ND3

  • unspecified to < 8.2.4.00affected

AutomationDirect SIO-MB12CDR

  • batch number (B/N) 5714442222affected

AutomationDirect SIO-MB04ADS

  • B/N 5714442222affected

AutomationDirect SIO-MB04THMS

  • B/N 57141862221affected

AutomationDirect SIO-MB04DAS

  • B/N 4714432222affected

References