CVE-2021-25849

An integer underflow was discovered in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet...

CVE-2021-25846

CVE-2021-25846 affects Moxa Camera VPort 06EC-2V Series (version 1.1) via improper validation of the ChassisID TLV in the LLDP handling path (userdisk/vport_lldpd). A crafted LLDP packet can pass a negative value to memcpy, triggering a denial of service. The vulnerability is documented across mu...

CVE-2021-25848

CVE-2021-25848 affects the Moxa Camera VPort 06EC-2V Series (version 1.1). The root cause is improper validation of the length field in the LLDP-MED TLV processed by userdisk/vport_lldpd, caused by using a fixed loop counter without validating the actual available length, allowing information dis...

PT-2021-16815

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue arises from improper validation of the ChassisID TLV in the userdisk/vport lldpd component, allowing attackers to cause a denial of service due to a NULL pointer dereference...

CVE-2021-25848: Out-of-bounds Read

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet...

CVE-2021-25847: Out-of-bounds Read

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet...

CVE-2021-25845: NULL Pointer Dereference

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet...

CVE-2021-25846: Integer Underflow (Wrap or Wraparound)

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet...

PT-2021-16817

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue is related to improper validation of the length field of LLDP-MED TLV in the userdisk/vport lldpd component. This allows information disclosure to attackers due to a controllab...

CVE-2021-25849: Integer Underflow (Wrap or Wraparound)

An integer underflow was discovered in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet...

PT-2021-16819

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description An integer underflow was discovered in the userdisk/vport lldpd component, caused by improper validation of the PortID TLV, which can lead to Denial of Service when a crafted lldp packet...

PT-2021-16818

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue arises from improper validation of the length field of LLDP-MED TLV in the userdisk/vport lldpd component, allowing information disclosure to attackers. This occurs due to the...

PT-2021-16816

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1 Description The issue is caused by improper validation of the ChassisID TLV in userdisk/vport lldpd, allowing attackers to cause a denial of service. This happens due to a negative number being pass...

SUSE: Security Advisory (SUSE-SU-2021:0297-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1309

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...

CVE-2021-1251

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...

CVE-2021-1308

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...

CVE-2021-1308

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...

CVE-2021-1251

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...

Memory corruption

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...