← Database

CVE-2022-40691

MEDIUM CVSS: 5.3 Published: 2023-02-07 Modified: 2026-06-17

Description

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.

Affected Platforms

Moxa Sds-3008Moxa Sds-3008 FirmwareMoxa Sds-3008-TMoxa Sds-3008-T Firmware

Weakness Type

CWE-200, NVD-CWE-Other

References