CVE-2022-41636

Name of the Vulnerable Software and Affected Versions Haas Controller version 100.20.000.1110

Description The issue concerns the transmission of communication traffic involving the "Ethernet Q Commands" service in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.

Recommendations For Haas Controller version 100.20.000.1110, consider implementing encryption for the "Ethernet Q Commands" service to protect sensitive information. As a temporary workaround, restrict access to the "Ethernet Q Commands" service to minimize the risk of exploitation.