Security Advisory

CVE-2022-41311

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-07 16:52:03
Last updated 2025-11-04 19:14:03
Assigner talos
State PUBLISHED

Description

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="webLocationMessage_text" name="webLocationMessage_text"