Moxa Sds-3008-T Firmware vulnerabilities

6 CVEs affecting Moxa Sds-3008-T Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-41313, published 2023-02-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-40224, published 2023-02-07. High severity, CVSS 7.5. EPSS: 64.7% chance of exploitation in the next 30 days. A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service.…
CVE-2022-40691, published 2023-02-07. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure…
CVE-2022-41313, published 2023-02-07. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary…
CVE-2022-41312, published 2023-02-07. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary…
CVE-2022-41311, published 2023-02-07. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary…
CVE-2022-40693, published 2023-02-07. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a…