Input validation

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet...

CVE-2021-25849

An integer underflow was discovered in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet...

CVE-2021-25849

The CVE-2021-25849 entry describes a denial-of-service vulnerability in MOXA Camera VPort 06EC-2V Series (version 1.1) caused by an integer underflow in the userdisk/vport_lldpd component due to improper validation of the PortID TLV. The affected device is vulnerable to a crafted LLDP packet that...

CVE-2021-25846

CVE-2021-25846 affects Moxa Camera VPort 06EC-2V Series (version 1.1) via improper validation of the ChassisID TLV in the LLDP handling path (userdisk/vport_lldpd). A crafted LLDP packet can pass a negative value to memcpy, triggering a denial of service. The vulnerability is documented across mu...

CVE-2021-25846

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet...

CVE-2021-25845

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet...

CVE-2021-25845

CVE-2021-25845 affects the Moxa Camera VPort 06EC-2V Series (firmware 1.1) and is rooted in the improper validation of the ChassisID TLV in the LLDP handling path (userdisk/vport_lldpd). A crafted LLDP packet can trigger a NULL pointer dereference , leading to a denial of service. Reports consist...

CVE-2021-25847

The CVE-2021-25847 issue affects Moxa Camera VPort 06EC-2V Series (version 1.1), where improper validation of the LLDP-MED TLV length in file userdisk/vport_lldpd enables information disclosure via a crafted LLDP packet that can trigger a controllable loop counter. The vulnerability is network‑fa...

CVE-2021-25847

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet...

CVE-2021-25848

CVE-2021-25848 affects the Moxa Camera VPort 06EC-2V Series (version 1.1). The root cause is improper validation of the length field in the LLDP-MED TLV processed by userdisk/vport_lldpd, caused by using a fixed loop counter without validating the actual available length, allowing information dis...

CVE-2021-25848

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet...

Moxa Camera VPort 06EC-2V 缓冲区错误漏洞

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can obtain compromised information by controlling a loop counter variable via a crafted lldp packet...

Unauthorized Access Vulnerability in AXIS XIS Q1602 Network Camera

Axis is an IT company specializing in providing network video solutions. It is the global market leader in network video, driving the conversion from analog to digital video surveillance.Axis' surveillance products and solutions are based on an open and innovative technology platform dedicated to...

Weak Password Vulnerability in Finetree 5MP Network Camera

5MP Network Camera is a camera product. A weak password vulnerability exists in Finetree 5MP Network Camera, which can be exploited by attackers to obtain sensitive information...

Moxa Camera VPort 06EC-2V 数字错误漏洞

MOXA Moxa Camera VPort 06EC-2V is a camera device from Moxa Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service by passing a carefully crafted lldp packet to a negative number in the memcpy function...

Moxa Camera VPort 06EC-2V 缓冲区错误漏洞

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can obtain compromised information by controlling a loop counter variable via a crafted lldp packet...

Moxa Camera VPort 06EC-2V 数字错误漏洞

MOXA Camera VPort 06EC-2V is a camera device from MOXA Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service via a crafted lldp packet...

Unauthorized Access Vulnerability in AXIS Q1604 Network Camera

Axis is an IT company specializing in providing network video solutions. It is the global market leader in network video, driving the conversion from analog to digital video surveillance.Axis' surveillance products and solutions are based on an open and innovative technology platform dedicated to...

Moxa Camera VPort 06EC-2V 代码问题漏洞

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service by dereferencing a NULL pointer via a fake lldp packet...

Unauthorized Access Vulnerability in AXIS Q1755 Network Camera

Axis is an IT company specializing in providing network video solutions. It is the global market leader in network video, driving the conversion from analog to digital video surveillance.Axis' surveillance products and solutions are based on an open and innovative technology platform dedicated to...