CVE-2022-40190 - CVE House
Back to Database
Status published High CVE-2022-40190

SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective...

Vulnerability Description

SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users’ browsers and steal sensitive information, including user credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40190

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ithaca Labs of Odyssey Cyber Security reported this vulnerability.

Affected Vendor

SAUTER Controls

View all reports →

Affected Software

moduWeb
Vulnerable Versions:
firmware Version 2.7.1

Timeline

Official Publish: October 31st, 2022
Last Modified: April 16th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)