Vulnerabilities > CVE-2021-25846 - Integer Underflow (Wrap or Wraparound) vulnerability in Moxa products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

moxa

CWE-191

NVD

Published: 2021-05-10

Updated: 2021-05-18

Summary

Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.

Vulnerable Configurations

Part	Description	Count
OS	Moxa Moxa Vport 06Ec 2V26M Firmware 1.1 Moxa Vport 06Ec 2V36M T Firmware 1.1 Moxa Vport 06Ec 2V36M CT Firmware 1.1 Moxa Vport 06Ec 2V36M CT T Firmware 1.1 Moxa Vport 06Ec 2V42M Firmware 1.1 Moxa Vport 06Ec 2V42M T Firmware 1.1 Moxa Vport 06Ec 2V42M CT Firmware 1.1 Moxa Vport 06Ec 2V42M CT T Firmware 1.1 Moxa Vport 06Ec 2V60M Firmware 1.1 Moxa Vport 06Ec 2V60M T Firmware 1.1 Moxa Vport 06Ec 2V60M CT Firmware 1.1 Moxa Vport 06Ec 2V60M CT T Firmware 1.1 Moxa Vport 06Ec 2V80M Firmware 1.1 Moxa Vport 06Ec 2V80M T Firmware 1.1 Moxa Vport 06Ec 2V80M CT Firmware 1.1 Moxa Vport 06Ec 2V80M CT T Firmware 1.1	16
Hardware	Moxa Moxa Vport 06Ec 2V26M - Moxa Vport 06Ec 2V36M T - Moxa Vport 06Ec 2V36M CT - Moxa Vport 06Ec 2V36M CT T - Moxa Vport 06Ec 2V42M - Moxa Vport 06Ec 2V42M T - Moxa Vport 06Ec 2V42M CT - Moxa Vport 06Ec 2V42M CT T - Moxa Vport 06Ec 2V60M - Moxa Vport 06Ec 2V60M T - Moxa Vport 06Ec 2V60M CT - Moxa Vport 06Ec 2V60M CT T - Moxa Vport 06Ec 2V80M - Moxa Vport 06Ec 2V80M T - Moxa Vport 06Ec 2V80M CT - Moxa Vport 06Ec 2V80M CT T -	16

Common Weakness Enumeration (CWE)

CWE-191 - Integer Underflow (Wrap or Wraparound)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References