CVE-2022-2485

Published: Aug 31, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Affected (10)

Products: Automationdirect: Sio Mb04rtds Firmware, Sio Mb04ads Firmware, Sio Mb04thms Firmware, Sio Mb08ads 1 Firmware, Sio Mb08ads 2 Firmware, Sio Mb08thms Firmware, Sio Mb04das Firmware, Sio Mb12cdr Firmware, Sio Mb16cdd2 Firmware, Sio Mb16nd3 Firmware

Automationdirect

10 products

Sio Mb04rtds Firmware

Sio Mb04ads Firmware

Sio Mb04thms Firmware

Sio Mb08ads 1 Firmware

Sio Mb08ads 2 Firmware

Sio Mb08thms Firmware

Sio Mb04das Firmware

Sio Mb12cdr Firmware

Sio Mb16cdd2 Firmware

Sio Mb16nd3 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb04rtds Firmware	Before 8.3.4.0

Running on/with	Platform Versions
Automationdirect Sio Mb04rtds	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb04ads Firmware	Before 8.4.3.0

Running on/with	Platform Versions
Automationdirect Sio Mb04ads	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb04thms Firmware	Before 8.5.4.0

Running on/with	Platform Versions
Automationdirect Sio Mb04thms	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb08ads 1 Firmware	Before 8.6.3.0

Running on/with	Platform Versions
Automationdirect Sio Mb08ads 1	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb08ads 2 Firmware	Before 8.7.3.0

Running on/with	Platform Versions
Automationdirect Sio Mb08ads 2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb08thms Firmware	Before 8.8.4.0

Running on/with	Platform Versions
Automationdirect Sio Mb08thms	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb04das Firmware	Before 8.11.3.0

Running on/with	Platform Versions
Automationdirect Sio Mb04das	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb12cdr Firmware	Before 8.0.4.0

Running on/with	Platform Versions
Automationdirect Sio Mb12cdr	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb16cdd2 Firmware	Before 8.1.4.0

Running on/with	Platform Versions
Automationdirect Sio Mb16cdd2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Automationdirect Sio Mb16nd3 Firmware	Before 8.2.4.0

Running on/with	Platform Versions
Automationdirect Sio Mb16nd3	All versions

Related CWEs

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (4)

https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf

Source: ics-cert@hq.dhs.gov

PatchVendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.