7.5high
CVE-2016-93321 exploit
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6.
Published 9 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
8.2%
percentile 95%
Public exploits
1
Exploit-DB
Summary
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.
Exploit prediction (EPSS)
8.24% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.
Exploits and detections
- EDB-40779 Moxa SoftCMS 1.5 - Denial of Service (PoC) · dos · 2016-11-18
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Affected products
- n/a Moxa SoftCMS prior to Version 1.6
Classification
- Weakness
- CWE-399 Resource Management Errors
References
- ics-cert.us-cert.gov /advisories/ICSA-16-322-02 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/94394 · vdb-entry, x_refsource_BID, x_transferred
- exploit-db.com /exploits/40779/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
Sources
- CVE List: CVE-2016-9332
- NVD: CVE-2016-9332
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.