The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service (reboot) via a crafted URL.
https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03
http://www.securitytracker.com/id/1033543
http://www.moxa.com/support/download.aspx?type=support&id=328