CVE-2021-25848

CVE-2021-25848 affects the Moxa Camera VPort 06EC-2V Series (version 1.1). The root cause is improper validation of the length field in the LLDP-MED TLV processed by userdisk/vport_lldpd, caused by using a fixed loop counter without validating the actual available length, allowing information dis...

Weak Password Vulnerability in Finetree 5MP Network Camera

5MP Network Camera is a camera product. A weak password vulnerability exists in Finetree 5MP Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS Q1755 Network Camera

Axis is an IT company specializing in providing network video solutions. It is the global market leader in network video, driving the conversion from analog to digital video surveillance.Axis' surveillance products and solutions are based on an open and innovative technology platform dedicated to...

Unauthorized Access Vulnerability in AXIS XIS Q1602 Network Camera

Axis is an IT company specializing in providing network video solutions. It is the global market leader in network video, driving the conversion from analog to digital video surveillance.Axis' surveillance products and solutions are based on an open and innovative technology platform dedicated to...

Unauthorized Access Vulnerability in AXIS Q1604 Network Camera

Axis is an IT company specializing in providing network video solutions. It is the global market leader in network video, driving the conversion from analog to digital video surveillance.Axis' surveillance products and solutions are based on an open and innovative technology platform dedicated to...

Moxa Camera VPort 06EC-2V code issue and vulnerabilities

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service by dereferencing a NULL pointer via a fake lldp packet...

Moxa Camera VPort 06EC-2V has a digital error vulnerability

MOXA Moxa Camera VPort 06EC-2V is a camera device from Moxa Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service by passing a carefully crafted lldp packet to a negative number in the memcpy function...

Moxa Camera VPort 06EC-2V Buffer Error Vulnerability

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can obtain compromised information by controlling a loop counter variable via a crafted lldp packet...

Moxa Camera VPort 06EC-2V Buffer Error Vulnerability

Moxa Camera VPort 06EC-2V is a camera device from Moxa MOXA of Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can obtain compromised information by controlling a loop counter variable via a crafted lldp packet...

CVE-2021-25849: Integer Underflow (Wrap or Wraparound)

An integer underflow was discovered in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet...

CVE-2021-25845: NULL Pointer Dereference

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet...

CVE-2021-25847: Out-of-bounds Read

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet...

CVE-2021-25848: Out-of-bounds Read

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet...

PT-2021-16818

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue arises from improper validation of the length field of LLDP-MED TLV in the userdisk/vport lldpd component, allowing information disclosure to attackers. This occurs due to the...

PT-2021-16817

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue is related to improper validation of the length field of LLDP-MED TLV in the userdisk/vport lldpd component. This allows information disclosure to attackers due to a controllab...

PT-2021-16819

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description An integer underflow was discovered in the userdisk/vport lldpd component, caused by improper validation of the PortID TLV, which can lead to Denial of Service when a crafted lldp packet...

PT-2021-16815

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue arises from improper validation of the ChassisID TLV in the userdisk/vport lldpd component, allowing attackers to cause a denial of service due to a NULL pointer dereference...

CVE-2021-25846: Integer Underflow (Wrap or Wraparound)

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet...

PT-2021-16816

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue is caused by improper validation of the ChassisID TLV in userdisk/vport lldpd, allowing attackers to cause a denial of service. This happens due to a negative number being pass...

Moxa Camera VPort 06EC-2V has a digital error vulnerability

MOXA Camera VPort 06EC-2V is a camera device from MOXA Taiwan, China. A security vulnerability exists in the Moxa Camera VPort 06EC-2V. An attacker can cause a denial of service via a crafted lldp packet...