PT-2017-10065 · Moxa · Moxa Softcms

Zhou Yu · Publicado 2017-02-13 · Atualizado 2017-09-03 · CVE-2016-9332

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions prior to 1.6

Description An issue in Moxa SoftCMS Webserver allows an attacker to provide unexpected input values, potentially causing the program to crash or leading to excessive consumption of resources, which could result in a denial-of-service condition.

Recommendations For versions prior to 1.6, update to version 1.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the webserver to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-9332

Produtos afetados

Moxa Softcms

Referências · 5

• 🔥 https://exploit-db.com/exploits/40779 · Exploit
• http://securityfocus.com/bid/94394 · Nota
• https://osv.dev/vulnerability/CVE-2016-9332 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9332 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 · Nota