CVE-2015-6458

2019-03-2119:23:47

CWE-120

icscert

www.cve.org

9.3 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.9%

JSON

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.

CNA Affected

[
  {
    "product": "SoftCMS",
    "vendor": "Moxa",
    "versions": [
      {
        "status": "affected",
        "version": "<= 1.3"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-15-239-01