PT-2023-1303 · Moxa · Moxa Sds-3008 Series Industrial Ethernet Switch

Patrick Desantis · Published 2023-02-02 · Updated 2023-02-16 · CVE-2022-41311

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1

Description A stored cross-site scripting issue exists in the web application functionality. This can be triggered by a specially-crafted HTTP request, leading to arbitrary Javascript execution. The vulnerability is related to insufficient protection of the web page structure when handling the Switch Location field in the Switch Information section. An attacker can exploit this by sending a crafted HTTP request. The form field webLocationMessage text is specifically mentioned as being involved.

Recommendations For Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1, consider disabling the web application functionality or restricting access to the Switch Information section until a patch is available. Avoid using the webLocationMessage text form field in the affected web application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-00581

CVE-2022-41311

Affected Products

Moxa Sds-3008 Series Industrial Ethernet Switch

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1619 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-41311 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41311 · Vendor Advisory
• https://moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00581 · Security Note
• https://t.me/cvenotify/43787 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2023020213 · Note
• https://t.me/cibsecurity/57688 · Telegram Post