CVE-2022-2485: Automationdirect Sio-MB04ADS Firmware

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

Affected products

• Automationdirect Sio-MB04ADS Firmware: before 8.4.3.0 (fixed in 8.4.3.0)
• Automationdirect Sio-MB04DAS Firmware: before 8.11.3.0 (fixed in 8.11.3.0)
• Automationdirect Sio-MB04RTDS Firmware: before 8.3.4.0 (fixed in 8.3.4.0)
• Automationdirect Sio-MB04THMS Firmware: before 8.5.4.0 (fixed in 8.5.4.0)
• Automationdirect Sio-MB08ADS-1 Firmware: before 8.6.3.0 (fixed in 8.6.3.0)
• Automationdirect Sio-MB08ADS-2 Firmware: before 8.7.3.0 (fixed in 8.7.3.0)
• Automationdirect Sio-MB08THMS Firmware: before 8.8.4.0 (fixed in 8.8.4.0)
• Automationdirect Sio-MB12CDR Firmware: before 8.0.4.0 (fixed in 8.0.4.0)
• Automationdirect Sio-MB16CDD2 Firmware: before 8.1.4.0 (fixed in 8.1.4.0)
• Automationdirect Sio-MB16ND3 Firmware: before 8.2.4.0 (fixed in 8.2.4.0)

Published 2022-08-31. Last modified 2026-06-17.