AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-2474

CRITICAL · CVSS 9.8 EPSS 0.67%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-2474
Severity
CRITICAL
CVSS
9.8
EPSS
0.67%

Original NVD Description

Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller (even while connected remotely) to access the service and write unauthorized macros to the device.