CVE-2022-40693

5.9MEDIUM

Key Information

Vendor
Moxa
Status
Sds-3008 Series Industrial Ethernet Switch
Vendor
CVE Published:
7 February 2023

Summary

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

Affected Version(s)

SDS-3008 Series Industrial Ethernet Switch = 2.1

Refferences

https://talosintelligence.com/vulnerability_reports/TALOS...
https://www.moxa.com/en/support/product-support/security-...

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.