Vulnerability Description
An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Vport 06Ec-2V26M Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V26M | - |
| Moxa | Vport 06Ec-2V36M-T Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V36M-T | - |
| Moxa | Vport 06Ec-2V36M-Ct Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V36M-Ct | - |
| Moxa | Vport 06Ec-2V36M-Ct-T Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V36M-Ct-T | - |
| Moxa | Vport 06Ec-2V42M Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V42M | - |
| Moxa | Vport 06Ec-2V42M-T Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V42M-T | - |
| Moxa | Vport 06Ec-2V42M-Ct Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V42M-Ct | - |
| Moxa | Vport 06Ec-2V42M-Ct-T Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V42M-Ct-T | - |
| Moxa | Vport 06Ec-2V60M Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V60M | - |
| Moxa | Vport 06Ec-2V60M-T Firmware | <= 1.1 |
| Moxa | Vport 06Ec-2V60M-T | - |
Related Weaknesses (CWE)
References
- https://www.moxa.com/en/Vendor Advisory
- https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-Vendor Advisory
- https://www.moxa.com/en/Vendor Advisory
- https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-Vendor Advisory
FAQ
What is CVE-2021-25849?
CVE-2021-25849 is a vulnerability with a CVSS score of 7.5 (HIGH). An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet...
How severe is CVE-2021-25849?
CVE-2021-25849 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-25849?
Check the references section above for vendor advisories and patch information. Affected products include: Moxa Vport 06Ec-2V26M Firmware, Moxa Vport 06Ec-2V26M, Moxa Vport 06Ec-2V36M-T Firmware, Moxa Vport 06Ec-2V36M-T, Moxa Vport 06Ec-2V36M-Ct Firmware.