CVE-2022-2475
Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. Any user is able to write macros into regist…
Published: 2022-10-28 · CVSS: 9.8 · CVSS 3.1
Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. Any user is able to write macros into registers outside of the authorized accessible range. This could allow a user to access privileged resources or resources out of context.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7