CVE-2016-9332

EUVD-2016-10142
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
moxasoftcms
𝑥
≤ 1.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94394
https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02
https://www.exploit-db.com/exploits/40779/
http://www.securityfocus.com/bid/94394
https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02
https://www.exploit-db.com/exploits/40779/