PT-2017-10065 · Moxa · Moxa Softcms

Zhou Yu · Published 2017-02-13 · Updated 2017-09-03 · CVE-2016-9332

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions prior to 1.6

Description An issue in Moxa SoftCMS Webserver allows an attacker to provide unexpected input values, potentially causing the program to crash or leading to excessive consumption of resources, which could result in a denial-of-service condition.

Recommendations For versions prior to 1.6, update to version 1.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the webserver to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-9332

Affected Products

Moxa Softcms

References · 5

• 🔥 https://exploit-db.com/exploits/40779 · Exploit
• https://osv.dev/vulnerability/CVE-2016-9332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9332 · Security Note
• http://securityfocus.com/bid/94394 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 · Note