CVE-2016-9332

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.

Affected

Moxa SoftCMS prior to Version 1.6

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 NVD

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

8.24% chance of exploitation in the next 30 days, 95th percentile

Published

2017-02-13

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40779

Security advisories

• http://www.securityfocus.com/bid/94394
• https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02

References

• CVE Record
• NVD entry