CVE-2021-25846

🗓️ 10 May 2021 10:52:25Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 46 Views🌐 WEB

Improper ChassisID TLV validation in Moxa Camera VPort 06EC-2V Serie

Reporter	Title	Published	Views	Family All 9
CNNVD	Moxa Camera VPort 06EC-2V 数字错误漏洞	10 May 202100:00	–	cnnvd
CNVD	Moxa Camera VPort 06EC-2V Denial of Service Vulnerability (CNVD-2021-36219)	12 May 202100:00	–	cnvd
Cvelist	CVE-2021-25846	10 May 202110:52	–	cvelist
EUVD	EUVD-2021-12727	7 Oct 202500:30	–	euvd
NVD	CVE-2021-25846	10 May 202111:15	–	nvd
OSV	CVE-2021-25846	10 May 202111:15	–	osv
Prion	Input validation	10 May 202111:15	–	prion
RedhatCVE	CVE-2021-25846	22 May 202518:26	–	redhatcve
Tenable Nessus	Moxa VPort Cameras Integer Underflow (CVE-2021-25846)	6 Mar 202600:00	–	nessus

NVD

Node

moxa vport_06ec-2v26m_firmwareRange≤1.1

AND

moxa vport_06ec-2v26mMatch-

Node

moxa vport_06ec-2v36m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v36m-tMatch-

Node

moxa vport_06ec-2v36m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v36m-ctMatch-

Node

moxa vport_06ec-2v36m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v36m-ct-tMatch-

Node

moxa vport_06ec-2v42m_firmwareRange≤1.1

AND

moxa vport_06ec-2v42mMatch-

Node

moxa vport_06ec-2v42m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v42m-tMatch-

Node

moxa vport_06ec-2v42m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v42m-ctMatch-

Node

moxa vport_06ec-2v42m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v42m-ct-tMatch-

Node

moxa vport_06ec-2v60m_firmwareRange≤1.1

AND

moxa vport_06ec-2v60mMatch-

Node

moxa vport_06ec-2v60m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v60m-tMatch-

Node

moxa vport_06ec-2v60m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v60m-ctMatch-

Node

moxa vport_06ec-2v60m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v60m-ct-tMatch-

Node

moxa vport_06ec-2v80m_firmwareRange≤1.1

AND

moxa vport_06ec-2v80mMatch-

Node

moxa vport_06ec-2v80m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v80m-tMatch-

Node

moxa vport_06ec-2v80m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v80m-ctMatch-

Node

moxa vport_06ec-2v80m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v80m-ct-tMatch-

Source	Link
moxa	www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilities
moxa	www.moxa.com/en/

Parameter	Position	Path	Description	CWE
ChassisID TLV	path	userdisk/vport_lldpd	Improper validation of ChassisID TLV in LLDP handling leads to denial of service via crafted LLDP packet	CWE-191
memcpy length	path	userdisk/vport_lldpd	Improper validation of ChassisID TLV in LLDP handling leads to denial of service via crafted LLDP packet	CWE-191

21 Nov 2024 05:55Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

CVSS 27.8

EPSS0.0032

cve-2021-25846 improper validation chassisid tlv userdisk vport_lldpd moxa camera denial of service memcpy function crafted lldp packet nvd