Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-40691 EUVD-2022-43962GHSA-r6vj-c75j-34h4

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.…

Published Feb 7, 2023 · Updated Aug 3, 2024 · Assigned by talos

Description

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Moxa SDS-3008 Series Industrial Ethernet Switch 2.1 —

References