Lucene search

TalosCVE-2022-40693

HistoryFeb 07, 2023 - 5:15 p.m.

CVE-2022-40693

2023-02-0717:15:10

CWE-319

talos

web.nvd.nist.gov

cve-2022-40693

cleartext transmission

vulnerability

moxa sds-3008

industrial ethernet switch

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

56.8%

JSON

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

Affected configurations

Nvd

Vulners

Node

moxasds-3008_firmwareRange≤2.1

AND

moxasds-3008Match-

Node

moxasds-3008-t_firmwareRange≤2.1

AND

moxasds-3008-tMatch-

VendorProductVersionCPE
moxasds-3008_firmware*cpe:2.3:o:moxa:sds-3008_firmware:*:*:*:*:*:*:*:*
moxasds-3008-cpe:2.3:h:moxa:sds-3008:-:*:*:*:*:*:*:*
moxasds-3008-t_firmware*cpe:2.3:o:moxa:sds-3008-t_firmware:*:*:*:*:*:*:*:*
moxasds-3008-t-cpe:2.3:h:moxa:sds-3008-t:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moxa	sds-3008_firmware	*	cpe:2.3:o:moxa:sds-3008_firmware::::::::
moxa	sds-3008	-	cpe:2.3:h:moxa:sds-3008:-:::::::*
moxa	sds-3008-t_firmware	*	cpe:2.3:o:moxa:sds-3008-t_firmware::::::::
moxa	sds-3008-t	-	cpe:2.3:h:moxa:sds-3008-t:-:::::::*

CNA Affected

[
  {
    "vendor": "Moxa",
    "product": "SDS-3008 Series Industrial Ethernet Switch",
    "versions": [
      {
        "version": "2.1",
        "status": "affected"
      }
    ]
  }
]

References

talosintelligence.com/vulnerability_reports/TALOS-2022-1616

www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

56.8%

JSON

Related for CVE-2022-40693