CVE-2022-40224

HIGH7.5

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2

Published Feb 7, 2023

Modified 12 months ago

Details

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

References

WEB

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2022-40224

WEB

https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities

WEB

https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1618

CVSS Analysis

CVSS v3.1

7.5