A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
Weakness
The product’s resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sds-3008_firmware | Moxa | * | 2.1 (including) |
Potential Mitigations
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618
- https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618
- https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1618