Read the docs
TI-2022-02296 Aliases CVE-2022-2485GHSA-grjv-rc2c-54r5

AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

Priority MEDIUM 44CWE-319Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-319.

Summary

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00549 46th percentileScored 2026-11-07
Fix Fixed SIO-MB04RTDS (AutomationDirect): 8.3.4.0SIO- MB04ADS (AutomationDirect): 8.4.3.0+8 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AutomationDirectSIO-MB04RTDSbefore 8.3.4.08.3.4.0Patch availableCNA
AutomationDirectSIO- MB04ADSbefore 8.4.3.08.4.3.0Patch availableCNA
AutomationDirectSIO-MB04THMSbefore 8.5.4.08.5.4.0Patch availableCNA
AutomationDirectSIO-MB08ADS-1before 8.6.3.08.6.3.0Patch availableCNA
AutomationDirectSIO-MB08ADS-2before 8.7.3.08.7.3.0Patch availableCNA
AutomationDirectSIO-MB08THMSbefore 8.8.4.08.8.4.0Patch availableCNA
AutomationDirectSIO-MB04DASbefore 8.11.3.08.11.3.0Patch availableCNA
AutomationDirectSIO-MB12CDRbefore 8.0.4.08.0.4.0Patch availableCNA
AutomationDirectSIO-MB16CDD2before 8.1.4.08.1.4.0Patch availableCNA
AutomationDirectSIO-MB16ND3before 8.2.4.008.2.4.00Patch availableCNA
AutomationDirectSIO-MB12CDRbatch number (B/N) 5714442222—No fix listedCNA
AutomationDirectSIO-MB04ADSB/N 5714442222—No fix listedCNA
AutomationDirectSIO-MB04THMSB/N 57141862221—No fix listedCNA
AutomationDirectSIO-MB04DASB/N 4714432222—No fix listedCNA
  • SIO-MB04RTDS VendorAutomationDirect Affected before 8.3.4.0 Fixed in 8.3.4.0 Patch available CNA
  • SIO- MB04ADS VendorAutomationDirect Affected before 8.4.3.0 Fixed in 8.4.3.0 Patch available CNA
  • SIO-MB04THMS VendorAutomationDirect Affected before 8.5.4.0 Fixed in 8.5.4.0 Patch available CNA
  • SIO-MB08ADS-1 VendorAutomationDirect Affected before 8.6.3.0 Fixed in 8.6.3.0 Patch available CNA
  • SIO-MB08ADS-2 VendorAutomationDirect Affected before 8.7.3.0 Fixed in 8.7.3.0 Patch available CNA
  • SIO-MB08THMS VendorAutomationDirect Affected before 8.8.4.0 Fixed in 8.8.4.0 Patch available CNA
  • SIO-MB04DAS VendorAutomationDirect Affected before 8.11.3.0 Fixed in 8.11.3.0 Patch available CNA
  • SIO-MB12CDR VendorAutomationDirect Affected before 8.0.4.0 Fixed in 8.0.4.0 Patch available CNA
  • SIO-MB16CDD2 VendorAutomationDirect Affected before 8.1.4.0 Fixed in 8.1.4.0 Patch available CNA
  • SIO-MB16ND3 VendorAutomationDirect Affected before 8.2.4.00 Fixed in 8.2.4.00 Patch available CNA
  • SIO-MB12CDR VendorAutomationDirect Affected batch number (B/N) 5714442222 Fixed in — No fix listed CNA
  • SIO-MB04ADS VendorAutomationDirect Affected B/N 5714442222 Fixed in — No fix listed CNA
  • SIO-MB04THMS VendorAutomationDirect Affected B/N 57141862221 Fixed in — No fix listed CNA
  • SIO-MB04DAS VendorAutomationDirect Affected B/N 4714432222 Fixed in — No fix listed CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:automationdirect:sio-mb04rtds_firmware:*:*:*:*:*:*:*:*before 8.3.4.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb04rtds:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb04ads_firmware:*:*:*:*:*:*:*:*before 8.4.3.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb04ads:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb04thms_firmware:*:*:*:*:*:*:*:*before 8.5.4.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb04thms:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb08ads-1_firmware:*:*:*:*:*:*:*:*before 8.6.3.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb08ads-1:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb08ads-2_firmware:*:*:*:*:*:*:*:*before 8.7.3.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb08ads-2:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb04rtds_firmware:*:*:*:*:*:*:*:* Versions before 8.3.4.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb04rtds:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb04ads_firmware:*:*:*:*:*:*:*:* Versions before 8.4.3.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb04ads:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb04thms_firmware:*:*:*:*:*:*:*:* Versions before 8.5.4.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb04thms:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb08ads-1_firmware:*:*:*:*:*:*:*:* Versions before 8.6.3.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb08ads-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb08ads-2_firmware:*:*:*:*:*:*:*:* Versions before 8.7.3.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb08ads-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:automationdirect:sio-mb08thms_firmware:*:*:*:*:*:*:*:*before 8.8.4.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb08thms:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb04das_firmware:*:*:*:*:*:*:*:*before 8.11.3.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb04das:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb12cdr_firmware:*:*:*:*:*:*:*:*before 8.0.4.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb12cdr:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb16cdd2_firmware:*:*:*:*:*:*:*:*before 8.1.4.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb16cdd2:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
cpe:2.3:o:automationdirect:sio-mb16nd3_firmware:*:*:*:*:*:*:*:*before 8.2.4.0VulnerableAutomationDirect
cpe:2.3:h:automationdirect:sio-mb16nd3:-:*:*:*:*:*:*:*not specified by NVDRunning onAutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb08thms_firmware:*:*:*:*:*:*:*:* Versions before 8.8.4.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb08thms:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb04das_firmware:*:*:*:*:*:*:*:* Versions before 8.11.3.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb04das:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb12cdr_firmware:*:*:*:*:*:*:*:* Versions before 8.0.4.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb12cdr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb16cdd2_firmware:*:*:*:*:*:*:*:* Versions before 8.1.4.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb16cdd2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
  • cpe:2.3:o:automationdirect:sio-mb16nd3_firmware:*:*:*:*:*:*:*:* Versions before 8.2.4.0 Vulnerable ·AutomationDirect
  • cpe:2.3:h:automationdirect:sio-mb16nd3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect

Remediation

  • Fix · CNA SIO-MB04RTDS (AutomationDirect) Fixed in 8.3.4.0
  • Fix · CNA SIO- MB04ADS (AutomationDirect) Fixed in 8.4.3.0
  • Fix · CNA SIO-MB04THMS (AutomationDirect) Fixed in 8.5.4.0
  • Fix · CNA SIO-MB08ADS-1 (AutomationDirect) Fixed in 8.6.3.0
  • Fix · CNA SIO-MB08ADS-2 (AutomationDirect) Fixed in 8.7.3.0
  • Fix · CNA SIO-MB08THMS (AutomationDirect) Fixed in 8.8.4.0
  • Fix · CNA SIO-MB04DAS (AutomationDirect) Fixed in 8.11.3.0
  • Fix · CNA SIO-MB12CDR (AutomationDirect) Fixed in 8.0.4.0
  • Fix · CNA SIO-MB16CDD2 (AutomationDirect) Fixed in 8.1.4.0
  • Fix · CNA SIO-MB16ND3 (AutomationDirect) Fixed in 8.2.4.00

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-2485
  2. 2026-10-03 Alias added: GHSA-grjv-rc2c-54r5

References

Patch 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences