CVE-2016-9332

Опубликовано: 13 фев. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Средний

Описание

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.

Ссылки

http://www.securityfocus.com/bid/94394
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02
Mitigation
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/40779/
http://www.securityfocus.com/bid/94394
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02
Mitigation
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/40779/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:moxa:softcms:*:*:*:*:*:*:*:*

Версия до 1.5 (включая)

EPSS

Процентиль: 97%

0.29698

Средний

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-55xr-gqp7-q7ff