CVE-2022-2474

Name of the Vulnerable Software and Affected Versions Haas Controller version 100.20.000.1110

Description The issue concerns the "Ethernet Q Commands" service in the Haas Controller, where authentication is currently unsupported. This allows any user on the same network segment as the controller, including those connected remotely, to access the service and write unauthorized macros to the device.

Recommendations For Haas Controller version 100.20.000.1110, consider disabling the "Ethernet Q Commands" service until a patch is available to prevent unauthorized access and macro writing. Restrict access to the network segment where the controller is located to minimize the risk of exploitation.