Description (CNA)
Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AutomationDirect / SIO-MB04RTDS | affected unspecified before 8.3.4.0 |
| AutomationDirect / SIO- MB04ADS | affected unspecified before 8.4.3.0 |
| AutomationDirect / SIO-MB04THMS | affected unspecified before 8.5.4.0 |
| AutomationDirect / SIO-MB08ADS-1 | affected unspecified before 8.6.3.0 |
| AutomationDirect / SIO-MB08ADS-2 | affected unspecified before 8.7.3.0 |
| AutomationDirect / SIO-MB08THMS | affected unspecified before 8.8.4.0 |
| AutomationDirect / SIO-MB04DAS | affected unspecified before 8.11.3.0 |
| AutomationDirect / SIO-MB12CDR | affected unspecified before 8.0.4.0 |
| AutomationDirect / SIO-MB16CDD2 | affected unspecified before 8.1.4.0 |
| AutomationDirect / SIO-MB16ND3 | affected unspecified before 8.2.4.00 |
| AutomationDirect / SIO-MB12CDR | affected batch number (B/N) 5714442222 |
| AutomationDirect / SIO-MB04ADS | affected B/N 5714442222 |
| AutomationDirect / SIO-MB04THMS | affected B/N 57141862221 |
| AutomationDirect / SIO-MB04DAS | affected B/N 4714432222 |
CWE
CWE-319
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05
- https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.