CVE-2018-25169CWE-1188

CVE-2018-25169

High · published March 6, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
26.8
In the wild
Unconfirmed
What it is

AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port. Attackers can establish multiple socket connections and transmit invalid payloads to exhaust server resources and cause service unavailability.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.8th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2026-03-06T18:15Z
References (2)
https://www.exploit-db.com/exploits/45850 · [email protected]https://www.vulncheck.com/advisories/ampps-denial-of-service-via-malformed-socket-connection · [email protected]
EPSS history
Timeline
  • 06 MAR 12:19Z
    AMPPS 2.7 Denial of Service via Malformed Socket Connection
    cvelistv5