CVE-2022-40691 (sds-3008-t_firmware, sds-3008_firmware)

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.

application cve disclosure ethernet http industrial information information disclosure moxa request send sensitive information series switch the web trigger vulnerability web web application