Moxa Ethernet Switches Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Moxa's Ethernet switches, specifically the TN-4528A model, in certain firmware versions. This vulnerability allows an authenticated administrative attacker to inject malicious scripts into the device's web service, which can then affect authenticated users interacting with the device's web interface. The injected scripts persist across sessions, leading to potential theft of cookies or session tokens, keylogging, theft of sensitive data, or defacement of the web interface.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user interacting with the device's web interface.

Remediation

Users are advised to update to version 4.0 or later. For specific guidance, refer to Moxa's security advisory MPSA-257421.