CVE-2021-25849

An integer underflow was discovered in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet...

CVE-2021-25846

CVE-2021-25846 affects Moxa Camera VPort 06EC-2V Series (version 1.1) via improper validation of the ChassisID TLV in the LLDP handling path (userdisk/vport_lldpd). A crafted LLDP packet can pass a negative value to memcpy, triggering a denial of service. The vulnerability is documented across mu...

CVE-2021-25849: Integer Underflow (Wrap or Wraparound)

An integer underflow was discovered in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet...

CVE-2021-25848: Out-of-bounds Read

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet...

PT-2021-16815

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue arises from improper validation of the ChassisID TLV in the userdisk/vport lldpd component, allowing attackers to cause a denial of service due to a NULL pointer dereference...

PT-2021-16819

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description An integer underflow was discovered in the userdisk/vport lldpd component, caused by improper validation of the PortID TLV, which can lead to Denial of Service when a crafted lldp packet...

CVE-2021-25845: NULL Pointer Dereference

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet...

PT-2021-16816

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue is caused by improper validation of the ChassisID TLV in userdisk/vport lldpd, allowing attackers to cause a denial of service. This happens due to a negative number being pass...

CVE-2021-25846: Integer Underflow (Wrap or Wraparound)

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet...

Design/Logic Flaw

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

CVE-2020-12521: Improper Input Validation

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

CVE-2019-1901: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...

CVE-2018-0395: Improper Input Validation

A vulnerability in the Link Layer Discovery Protocol LLDP implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when the device unexpectedly reloads. The vulnerability is due to improper input...

Memory corruption

An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadcast, may be able to cause a Junos device to enter an improper boundary check condition allowing a memory corruption to occur, leading to a denial of service...

CVE-2016-1425

Cisco IOS 15.02SG5, 15.12SG3, 15.21E, 15.33S, and 15.41.13S allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun66735...

CVE-2016-1425: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS 15.02SG5, 15.12SG3, 15.21E, 15.33S, and 15.41.13S allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun66735...

CVE-2016-1424

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...

Code injection

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...

CVE-2016-1424

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...

CVE-2016-1424: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...