CVE-2015-6457CWE-122

CVE-2015-6457: vulnerability in Moxa SoftCMS

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.8%
In short

Moxa SoftCMS versions 1.3 and earlier have a buffer overflow flaw that can crash the software or let attackers run harmful code remotely without special access.

Technical detail

A buffer overflow vulnerability in Moxa SoftCMS 1.3 and prior allows remote code execution or denial of service when untrusted input exceeds allocated buffer boundaries. The attack requires network access to the vulnerable service but no authentication, enabling arbitrary code execution in the application's context.

Summary generated and translated by AI from the official description.
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
Affected products
Moxa · SoftCMS
Related CVEs — Moxa SoftCMS

In the same product, most dangerous first.