CVE-2016-9332

7.5HIGH

Key Information:

Vendor
Moxa
Status
Moxa Softcms Prior To Version 1.6
Vendor
CVE Published:
13 February 2017

Summary

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.

Affected Version(s)

Moxa SoftCMS prior to Version 1.6 Moxa SoftCMS prior to Version 1.6

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02
x_refsource_MISC
http://www.securityfocus.com/bid/94394
vdb-entryx_refsource_BID
https://www.exploit-db.com/exploits/40779/
exploitx_refsource_EXPLOIT-DB

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.