CVE-2016-9332 in SoftCMS

Riassunto

di MITRE

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 16/11/2016
• Divulgazione: 13/02/2017
• Moderazione: accettato
• Voce: VDB-96894
• CPE: pronto
• CWE: CWE-399 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.08239
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Chemical, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-9332
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-9332
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-9332/