CVE-2017-7456

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-DENIAL-OF-SERVICE.txtExploit, Third Party Advisory
http://seclists.org/fulldisclosure/2017/Apr/50Exploit, Mailing List, Third Party Advisory
https://www.exploit-db.com/exploits/41851/
http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-DENIAL-OF-SERVICE.txtExploit, Third Party Advisory
http://seclists.org/fulldisclosure/2017/Apr/50Exploit, Mailing List, Third Party Advisory
https://www.exploit-db.com/exploits/41851/

Timeline

Published: Apr 14, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-74575.0XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.CVE-2017-74587.5The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NU CVE-2017-74597.5ntopng before 3.0 allows HTTP Response Splitting.CVE-2017-74614.9Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows re CVE-2017-74629.8Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web direc CVE-2017-74636.1JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes a CVE-2017-74649.8It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. An attacker coul CVE-2017-74659.8It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use t CVE-2017-74668.0Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control CVE-2017-74679.8A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could p CVE-2017-74687.5In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client certificate had changed CVE-2017-74709.8It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect au