CVE-2018-25169

Summary

AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port. Attackers can establish multiple socket connections and transmit invalid payloads to exhaust server resources and cause service unavailability.

Affected Software

Weaknesses

• CWE-1188: Initialization of a Resource with an Insecure Default

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.exploit-db.com/exploits/45850
• https://www.vulncheck.com/advisories/ampps-denial-of-service-via-malformed-socket-connection

• ←Previous
• Next→