Communication traffic involving Ethernet Q Commands service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Haas_controller | Haascnc | 100.20.000.1110 (including) | 100.20.000.1110 (including) |