{"api_version":"1","generated_at":"2026-07-23T01:54:46+00:00","cve":"CVE-2016-9332","urls":{"html":"https://cve.report/CVE-2016-9332","api":"https://cve.report/api/cve/CVE-2016-9332.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-9332","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-9332"},"summary":{"title":"CVE-2016-9332","description":"An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.","state":"PUBLISHED","assigner":"icscert","published_at":"2017-02-13 21:59:01","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-399","Moxa SoftCMS denial-of-service"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.8","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"https://www.exploit-db.com/exploits/40779/","name":"https://www.exploit-db.com/exploits/40779/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Moxa SoftCMS 1.5 - Denial of Service (PoC) - Windows dos Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/94394","name":"http://www.securityfocus.com/bid/94394","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02","name":"https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"],"title":"Moxa SoftCMS Vulnerabilities | ICS-CERT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9332","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9332","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"Moxa SoftCMS prior to Version 1.6","version":"affected Moxa SoftCMS prior to Version 1.6","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"9332","vulnerable":"1","versionEndIncluding":"1.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"moxa","cpe5":"softcms","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T02:50:36.933Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02"},{"name":"94394","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/94394"},{"name":"40779","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/40779/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Moxa SoftCMS prior to Version 1.6","vendor":"n/a","versions":[{"status":"affected","version":"Moxa SoftCMS prior to Version 1.6"}]}],"datePublic":"2017-02-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition."}],"problemTypes":[{"descriptions":[{"description":"Moxa SoftCMS denial-of-service","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-02T09:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","shortName":"icscert"},"references":[{"tags":["x_refsource_MISC"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02"},{"name":"94394","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/94394"},{"name":"40779","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/40779/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2016-9332","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Moxa SoftCMS prior to Version 1.6","version":{"version_data":[{"version_value":"Moxa SoftCMS prior to Version 1.6"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Moxa SoftCMS denial-of-service"}]}]},"references":{"reference_data":[{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02"},{"name":"94394","refsource":"BID","url":"http://www.securityfocus.com/bid/94394"},{"name":"40779","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/40779/"}]}}}},"cveMetadata":{"assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","assignerShortName":"icscert","cveId":"CVE-2016-9332","datePublished":"2017-02-13T21:00:00.000Z","dateReserved":"2016-11-16T00:00:00.000Z","dateUpdated":"2024-08-06T02:50:36.933Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-02-13 21:59:01","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-399","Moxa SoftCMS denial-of-service"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moxa:softcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"FA1F6404-5BE2-4A5C-9556-6F04E2BABDAC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"9332","Ordinal":"1","Title":"CVE-2016-9332","CVE":"CVE-2016-9332","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"9332","Ordinal":"1","NoteData":"An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition.","Type":"Description","Title":"CVE-2016-9332"},{"CveYear":"2016","CveId":"9332","Ordinal":"2","NoteData":"2017-02-13","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"9332","Ordinal":"3","NoteData":"2017-09-02","Type":"Other","Title":"Modified"}]}}}