Vulnerabilities > CVE-2022-40224 - Unspecified vulnerability in Moxa Sds-3008-T Firmware and Sds-3008 Firmware
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 2 | |
| Hardware | 2 |
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618
- https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
- https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1618