CVE-2022-2474
Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segmen…
Published: 2022-10-28 · CVSS: 9.8 · CVSS 3.1
Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller (even while connected remotely) to access the service and write unauthorized macros to the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7