Stored Cross-Site Scripting in Moxa SDS-3008 Series Industrial Ethernet Switch
CVE-2022-41313

4.3MEDIUM

Key Information:

Vendor: Moxa
Status: Sds-3008 Series Industrial Ethernet Switch
Vendor: CVE Published:; 7 February 2023

What is CVE-2022-41313?

The Moxa SDS-3008 Series Industrial Ethernet Switch 2.1 is impacted by a stored cross-site scripting vulnerability that allows for the execution of arbitrary JavaScript. This vulnerability can be exploited through a specially crafted HTTP request, enabling an attacker to manipulate the web application functionality, potentially compromising sensitive information or the integrity of the system. It highlights the importance of maintaining updated firmware and securing web interfaces against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SDS-3008 Series Industrial Ethernet Switch 2.1

References

https://talosintelligence.com/vulnerability_reports/TALOS...

https://www.moxa.com/en/support/product-support/security-...

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

Required

Scope:

Unchanged

CVSS V3.0