ByteOS Network

NVD Vulnerability Details :

CVE-2016-9332

Deferred

Source-ics-cert@hq.dhs.gov

Published At-13 Feb, 2017 | 21:59

Updated At-20 Apr, 2025 | 01:37

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 7.8

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

Moxa Inc.

>>softcms>>Versions up to 1.5(inclusive)

cpe:2.3:a:moxa:softcms:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/94394	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02	ics-cert@hq.dhs.gov	Mitigation Third Party Advisory US Government Resource
https://www.exploit-db.com/exploits/40779/	ics-cert@hq.dhs.gov	N/A
http://www.securityfocus.com/bid/94394	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02	af854a3a-2127-422b-91ae-364da2661108	Mitigation Third Party Advisory US Government Resource
https://www.exploit-db.com/exploits/40779/	af854a3a-2127-422b-91ae-364da2661108	N/A