CVE-2022-41311

🗓️ 07 Feb 2023 16:52:03Reported by talosType

Stored XSS vulnerability in Moxa SDS-3008 Series Industrial Ethernet Switch 2.1 allows arbitrary JavaScript execution via crafted HTTP request in form field id="webLocationMessage_text"

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-41311	7 Feb 202320:24	–	circl
CNNVD	MOXA SDS-3008 跨站脚本漏洞	2 Feb 202300:00	–	cnnvd
CNVD	Moxa SDS-3008 cross-site scripting vulnerability (CNVD-2023-58305)	6 Feb 202300:00	–	cnvd
Cvelist	CVE-2022-41311	7 Feb 202316:52	–	cvelist
EUVD	EUVD-2022-44520	3 Oct 202520:07	–	euvd
NVD	CVE-2022-41311	7 Feb 202317:15	–	nvd
Prion	Cross site scripting	7 Feb 202317:15	–	prion
Positive Technologies	PT-2023-1303 · Moxa · Moxa Sds-3008 Series Industrial Ethernet Switch	2 Feb 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-41311	22 May 202523:39	–	redhatcve
Talos	Moxa SDS-3008 Series Industrial Ethernet Switch web application stored cross-site scripting vulnerability	2 Feb 202300:00	–	talos

NVD

Vulners

Node

moxa sds-3008_firmwareRange≤2.1

AND

moxa sds-3008Match-

Node

moxa sds-3008-t_firmwareRange≤2.1

AND

moxa sds-3008-tMatch-

[
  {
    "vendor": "Moxa",
    "product": "SDS-3008 Series Industrial Ethernet Switch",
    "versions": [
      {
        "version": "2.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1619
moxa	www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1619

04 Nov 2025 20:16Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4

CVSS 34.3

EPSS0.01052

SSVC

CWE-79