CVE-2022-41311

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="webLocationMessage_text" name="webLocationMessage_text"
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:moxa:sds-3008_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:sds-3008:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:moxa:sds-3008-t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:sds-3008-t:-:*:*:*:*:*:*:*

Information

Published : 2023-02-07 09:15

Updated : 2023-02-16 06:33


NVD link : CVE-2022-41311

Mitre link : CVE-2022-41311


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

moxa

  • sds-3008
  • sds-3008-t_firmware
  • sds-3008-t
  • sds-3008_firmware