CVE-2015-6458CWE-120

CVE-2015-6458: vulnerability in Moxa SoftCMS

Published · Updated

Follow this CVE+ Monitor SoftCMS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.8%
In short

Moxa SoftCMS 1.3 and earlier contain a buffer overflow flaw that attackers can exploit to crash the application or execute arbitrary code remotely. This vulnerability was patched in version 1.4.

Technical detail

A buffer overflow vulnerability in Moxa SoftCMS 1.3 and prior allows remote attackers to overwrite memory boundaries, potentially achieving remote code execution or denial of service. The vulnerability exists due to insufficient input validation on data processed by the application, enabling attackers to trigger the condition without prior authentication.

Summary generated and translated by AI from the official description.
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
Affected products
Moxa · SoftCMS
Related CVEs — Moxa SoftCMS

In the same product, most dangerous first.

CVE-2015-6457—CVE-2015-6457EPSS 2.8%