VULNERABILITY INTELLIGENCE

CVE-2022-40190

CVSS score8.8 HIGH
EPSS probability0.85%
CISA KEVNot currently listed
Published2022-10-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users’ browsers and steal sensitive information, including user credentials.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-79

Primary references