CVE-2016-8360 An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an att...
HighCVSS 8.1
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa softcms | <= 1.5 | No fix listed |
References
- 94394 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource