NetSight
IP …
critical9.6

CVE-2022-2485

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communi…

Impact

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Affected products

VendorProductAffected versions
AutomationdirectSio-Mb04rtds Firmware
before 8.3.4.0
AutomationdirectSio-Mb04ads Firmware
before 8.4.3.0
AutomationdirectSio-Mb04thms Firmware
before 8.5.4.0
AutomationdirectSio-Mb08ads-1 Firmware
before 8.6.3.0
AutomationdirectSio-Mb08ads-2 Firmware
before 8.7.3.0
AutomationdirectSio-Mb08thms Firmware
before 8.8.4.0
AutomationdirectSio-Mb04das Firmware
before 8.11.3.0
AutomationdirectSio-Mb12cdr Firmware
before 8.0.4.0
AutomationdirectSio-Mb16cdd2 Firmware
before 8.1.4.0
AutomationdirectSio-Mb16nd3 Firmware
before 8.2.4.0

Weakness classification

CWE-319

References