CVE-2022-40224CWE-410

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1

Medium · published February 7, 2023

Patch now

High probability of exploitation

CVSS calls it medium at 5.3. It sits in the 99.2th percentile for exploit probability.

CVSS v3.0
5.3
EPSS
65%
Percentile
99.2
In the wild
Unconfirmed
What it is

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.64686 · 99.2th percentile
Weakness
CWE-410 · Insufficient Resource Pool
Published
2023-02-07T16:52Z
EPSS history
Timeline
  • 07 FEB 16:52Z
    A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1
    cvelistv5