CVE-2021-25847

🗓️ 10 May 2021 10:43:02Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 50 Views🌐 WEB

Improper validation of length in LLDP-MED TLV in Moxa Camera VPort 06EC-2V Series, v1.1, allows information disclosure via crafted lldp packet

Reporter	Title	Published	Views	Family All 9
CNNVD	Moxa Camera VPort 06EC-2V 缓冲区错误漏洞	10 May 202100:00	–	cnnvd
CNVD	Unspecified Vulnerability in Moxa Camera VPort 06EC-2V (CNVD-2021-36216)	12 May 202100:00	–	cnvd
Cvelist	CVE-2021-25847	10 May 202110:43	–	cvelist
EUVD	EUVD-2021-12728	7 Oct 202500:30	–	euvd
NVD	CVE-2021-25847	10 May 202111:15	–	nvd
OSV	CVE-2021-25847	10 May 202111:15	–	osv
Prion	Input validation	10 May 202111:15	–	prion
RedhatCVE	CVE-2021-25847	22 May 202521:37	–	redhatcve
Tenable Nessus	Moxa VPort Cameras Out-of-bounds Read (CVE-2021-25847)	6 Mar 202600:00	–	nessus

NVD

Node

moxa vport_06ec-2v26m_firmwareRange≤1.1

AND

moxa vport_06ec-2v26mMatch-

Node

moxa vport_06ec-2v36m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v36m-tMatch-

Node

moxa vport_06ec-2v36m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v36m-ctMatch-

Node

moxa vport_06ec-2v36m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v36m-ct-tMatch-

Node

moxa vport_06ec-2v42m_firmwareRange≤1.1

AND

moxa vport_06ec-2v42mMatch-

Node

moxa vport_06ec-2v42m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v42m-tMatch-

Node

moxa vport_06ec-2v42m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v42m-ctMatch-

Node

moxa vport_06ec-2v42m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v42m-ct-tMatch-

Node

moxa vport_06ec-2v60m_firmwareRange≤1.1

AND

moxa vport_06ec-2v60mMatch-

Node

moxa vport_06ec-2v60m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v60m-tMatch-

Node

moxa vport_06ec-2v60m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v60m-ctMatch-

Node

moxa vport_06ec-2v60m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v60m-ct-tMatch-

Node

moxa vport_06ec-2v80m_firmwareRange≤1.1

AND

moxa vport_06ec-2v80mMatch-

Node

moxa vport_06ec-2v80m-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v80m-tMatch-

Node

moxa vport_06ec-2v80m-ct_firmwareRange≤1.1

AND

moxa vport_06ec-2v80m-ctMatch-

Node

moxa vport_06ec-2v80m-ct-t_firmwareRange≤1.1

AND

moxa vport_06ec-2v80m-ct-tMatch-

Source	Link
moxa	www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilities
moxa	www.moxa.com/en/

Parameter	Position	Path	Description	CWE
length field	path	userdisk/vport_lldpd	Improper validation of the length field in LLDP-MED TLV in userdisk/vport_lldpd allowing information disclosure via crafted LLDP packet.	CWE-125
lldp packet	path	userdisk/vport_lldpd	Improper validation of the length field in LLDP-MED TLV in userdisk/vport_lldpd allowing information disclosure via crafted LLDP packet.	CWE-125

17 Jun 2026 03:42Current

8.4High risk

Vulners AI Score8.4

CVSS 28.5

CVSS 3.19.1

EPSS0.01186

CWE-125