Back to Database
Status published
Critical
CVE-2022-2485
AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information
Vulnerability Description
Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2485
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Byron Chaney of Accenture Security reported this vulnerability to CISA.
References
More from AutomationDirect
View All →CVE-2025-67652
AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password
Medium
6.1
CVE-2025-62688
AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource
Medium
6.9
CVE-2025-62498
AutomationDirect Productivity Suite Relative Path Traversal
High
8.6
CVE-2025-61977
AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password
High
7.3
CVE-2025-61934
AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327
Critical
9.3
Affected Vendor
AutomationDirect
View all reports →Affected Software
SIO-MB04RTDS, SIO- MB04ADS, SIO-MB04THMS, SIO-MB08ADS-1, SIO-MB08ADS-2, SIO-MB08THMS, SIO-MB04DAS, SIO-MB12CDR, SIO-MB16CDD2, SIO-MB16ND3, SIO-MB04ADS
Vulnerable Versions:
unspecified, batch number (B/N) 5714442222, B/N 5714442222, B/N 57141862221, B/N 4714432222
Timeline
Official Publish:
August 31st, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H