VULNERABILITY INTELLIGENCE
CVE-2018-25169
CVSS score8.7 HIGH
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-03-06
Last modified2026-10-07
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port. Attackers can establish multiple socket connections and transmit invalid payloads to exhaust server resources and cause service unavailability.
Weakness classification
- CWE-1188: Initialization of a Resource with an Insecure Default