Sds 3008 T Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:moxa:sds-3008-t_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Sds 3008 T Firmware (6bba6321-4ad6-5ca2-b974-07d549d9377b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-41313 |
vulnerable | 2026-06-08 05:48:30.222297 |
Details available
MEDIUM (4.3)
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="switch_contact"
Published: 2023-02-07T16:52:03.195Z
Updated: 2025-11-04T19:14:05.557Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41312 |
vulnerable | 2026-06-08 05:48:30.221757 |
Details available
MEDIUM (4.3)
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="Switch Description", name "switch_description"
Published: 2023-02-07T16:52:03.117Z
Updated: 2025-11-04T19:14:04.460Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41311 |
vulnerable | 2026-06-08 05:48:30.221160 |
Details available
MEDIUM (4.3)
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="webLocationMessage_text" name="webLocationMessage_text"
Published: 2023-02-07T16:52:03.034Z
Updated: 2025-11-04T19:14:03.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40693 |
vulnerable | 2026-06-08 05:48:27.909708 |
Details available
MEDIUM (5.9)
A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
Published: 2023-02-07T16:52:04.022Z
Updated: 2024-08-03T12:21:46.601Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40691 |
vulnerable | 2026-06-08 05:48:27.906215 |
Details available
MEDIUM (5.3)
An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2023-02-07T16:52:02.533Z
Updated: 2024-08-03T12:21:46.623Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40224 |
vulnerable | 2026-06-08 05:48:24.230364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.