CVE-2015-6458

CWE-120 — Classic Buffer OverflowCWE-119 — Buffer Overflow3 documents3 sources
Severity
8.8HIGH
EPSS
1.2%
top 21.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Moxa Softcms
Timeline
PublishedMar 21
Latest updateMay 13

Description

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5moxa/softcms1.3
▶NVDmoxa/softcms1.3

🔴Vulnerability Details

2
GHSA
GHSA-8mgx-vxh4-599c: Moxa SoftCMS 1↗2022-05-13
▶
CVEList
CVE-2015-6458: Moxa SoftCMS 1↗2019-03-21
▶
CVE-2015-6458 (HIGH CVSS 8.8) | Moxa SoftCMS 1.3 and prior is susce | cvebase.io