Haas

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Haas records in CISA KEV

No Haas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Haas Controller Firmware 2 records MEDIUM Haas Controller 1 record MEDIUM

Records

2 records in Haas Controller Firmware · all components

TI-2022-02286 CVE-2022-2475 · GHSA-cg5h-m79h-hhgh

Haas Controller version 100.20.000.1110 has insufficient granularity of access control…

MEDIUM 50

Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0074 Published 2022-10-28 No fix listed CWE-1220

TI-2022-02285 CVE-2022-2474 · GHSA-495g-cppx-r4mf

Missing authentication in Haas CNC Controller

MEDIUM 50

Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller (even while connected r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2022-10-28 No fix listed CWE-306

Open these records in search →

Critical	3
High	0
Medium	0
Low	0
No CVSS	0