Vulnerability Details CVE-2022-40224
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.088
EPSS Ranking 92.1%
CVSS Severity
CVSS v3 Score 5.3
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618
- https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618
- https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1618
Products affected by CVE-2022-40224
-
cpe:2.3:h:moxa:sds-3008-t:-
-
cpe:2.3:h:moxa:sds-3008:-
-
cpe:2.3:o:moxa:sds-3008-t_firmware:*
-
cpe:2.3:o:moxa:sds-3008_firmware:*