PT-2023-1305 · Moxa · Moxa Sds-3008 Series Industrial Ethernet Switch

Patrick Desantis · Published 2023-02-02 · Updated 2023-02-15 · CVE-2022-41312

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1

Description A stored cross-site scripting issue exists in the web application functionality, allowing arbitrary Javascript execution through a specially-crafted HTTP request. The vulnerability is related to insufficient protection of the web page structure when handling the switch description field in the Switch Information section. An attacker can exploit this by sending an HTTP request to trigger the issue, potentially leading to the execution of arbitrary JavaScript code. The form field id="Switch Description" and name="switch description" are specifically implicated.

Recommendations For Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1, consider disabling the web application functionality or restricting access to the Switch Information section until a patch is available. As a temporary workaround, avoid using the switch description field in the affected form until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-00583

CVE-2022-41312

Affected Products

Moxa Sds-3008 Series Industrial Ethernet Switch

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1619 · Exploit
• https://moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41312 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00583 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-41312 · Security Note
• https://cybersecurity-help.cz/vdb/SB2023020213 · Note
• https://t.me/cvenotify/43786 · Telegram Post