CVE-2022-40691

The CVE-2022-40691 issue affects Moxa SDS-3008 Series Industrial Ethernet Switch (web UI, version 2.1). A vulnerability in the web application allows information disclosure via specially crafted HTTP requests, with examples such as accessing /auth/accountpassword.asp/ (and with a trailing backsla...

CVE-2022-40691

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

Moxa SDS-3008 Series Industrial Ethernet Switch web application information disclosure vulnerability

Talos Vulnerability Report TALOS-2022-1621 Moxa SDS-3008 Series Industrial Ethernet Switch web application information disclosure vulnerability February 2, 2023 CVE Number CVE-2022-40691 SUMMARY An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008...