Moxa Vport 06Ec-2V60M-Ct Firmware vulnerabilities
5 known vulnerabilities affecting moxa/vport_06ec-2v60m-ct_firmware.
Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH3
Vulnerabilities
Page 1 of 1
CVE-2021-25848CRITICALCVSS 9.1≤ 1.12021-05-10
CVE-2021-25848 [CRITICAL] CWE-125 CVE-2021-25848: Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.
nvd
CVE-2021-25847CRITICALCVSS 9.1≤ 1.12021-05-10
CVE-2021-25847 [CRITICAL] CWE-125 CVE-2021-25847: Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet.
nvd
CVE-2021-25849HIGHCVSS 7.5≤ 1.12021-05-10
CVE-2021-25849 [HIGH] CWE-191 CVE-2021-25849: An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, ver
An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet.
nvd
CVE-2021-25846HIGHCVSS 7.5≤ 1.12021-05-10
CVE-2021-25846 [HIGH] CWE-191 CVE-2021-25846: Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.
nvd
CVE-2021-25845HIGHCVSS 7.5v1.12021-05-10
CVE-2021-25845 [HIGH] CWE-476 CVE-2021-25845: Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet.
nvd