CVE-2022-41636: Haascnc Haas Controller

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.

Affected products

• Haascnc Haas Controller: version 100.20.000.1110 only

Published 2022-10-28. Last modified 2026-06-17.