CVE Vulnerability

CVE-2022-41312

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="Switch Description", name "switch_description"

5.4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities Vendor Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1619 Exploit Technical Description
Configurations

Configuration 1
Information

Published : 2023-02-07 05:15

Updated : 2023-02-15 08:15

NVD link : CVE-2022-41312

Mitre link : CVE-2022-41312

Products Affected
No products.
CWE
CWE-79