Haas vulnerabilities
We track 3 vulnerabilities in Haas products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2022.
Latest Haas vulnerabilities
- 7.5 High severity
Haas CNC Controller: Cleartext Transmission of Sensitive Information
Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. This allows an attacker to obtain sensitive information being passed to and from the controller.
- 8.8 High severity
Haas CNC Controller: Insufficient Granularity of Access Control
Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. Any user is able to write macros into registers outside of the authorized accessible range. This could allow a user to access p
- 8.0 High severity
Haas CNC Controller: Missing Authentication for Critical Functionality
Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller (even while connected remotely) to access the service and write