Security Advisory

CVE-2022-41312

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-07 16:52:03
Last updated 2025-11-04 19:14:04
Assigner talos
State PUBLISHED

Description

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="Switch Description", name "switch_description"