漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected device’s web service. This vulnerability is classified as Host Header Injection, where invalid Host headers can manipulate to redirect users, forge links, or phishing attacks. There is no impact to the confidentiality, integrity, and availability of the affected device; no loss of confidentiality, integrity, and availability within any subsequent systems.
CVSS Information
N/A
Vulnerability Type
在可信数据中接受外来的不可信数据
Vulnerability Title
Moxa Ethernet switches 安全漏洞
Vulnerability Description
Moxa Ethernet switches是中国台湾Moxa公司的一款工业级网络交换机。 Moxa Ethernet switches存在安全漏洞，该漏洞源于HTTP Host标头注入，可能导致重定向用户、伪造链接或钓鱼。以下产品受到影响：TN-4500A Series、TN-5500A Series、TN-G4500 Series、TN-G6500 Series。
CVSS Information
N/A
Vulnerability Type
N/A