Vulnerability-Lookup

VAR-202105-0810

Vulnerability from variot - Updated: 2025-01-30 20:07
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet. Moxa Camera VPort 06EC-2V is a camera equipment of Taiwan Moxa (MOXA) Company.
Moxa Camera VPort 06EC-2V has security vulnerabilities. The attacker can control the loop counter variable through the elaborate lldp data packet to obtain the leaked information
Show details on source website
JSON
To clipboard Create KEV Entry
{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202105-0810",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "vport 06ec-2v42m",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v80m-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v36m-ct-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v42m-ct-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v36m-ct",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v60m-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v26m",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v36m-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v60m-ct",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v60m",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v80m-ct-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v60m-ct-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v80m-ct",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v42m-ct",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v42m-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "vport 06ec-2v80m",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.1"
      },
      {
        "model": "camera vport 06ec-2v",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "moxa",
        "version": "\u003c=1.1"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "cve": "CVE-2021-25848",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2021-25848",
            "impactScore": 7.8,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.1,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2021-36217",
            "impactScore": 7.8,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2021-25848",
            "impactScore": 5.2,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2021-25848",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2021-36217",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202105-496",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULMON",
            "id": "CVE-2021-25848",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-25848"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet. Moxa Camera VPort 06EC-2V is a camera equipment of Taiwan Moxa (MOXA) Company. \n\r\n\r\nMoxa Camera VPort 06EC-2V has security vulnerabilities. The attacker can control the loop counter variable through the elaborate lldp data packet to obtain the leaked information",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-25848"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-25848"
      }
    ],
    "trust": 1.53
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2021-25848",
        "trust": 2.4
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496",
        "trust": 0.6
      },
      {
        "db": "OTHER",
        "id": "NONE",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-25848",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-25848"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "id": "VAR-202105-0810",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      }
    ],
    "trust": 1.7
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "IoT"
        ],
        "sub_category": null,
        "trust": 0.6
      },
      {
        "category": [
          "camera device"
        ],
        "sub_category": "camera",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      }
    ]
  },
  "last_update_date": "2025-01-30T20:07:07.108000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for Moxa Camera VPort 06EC-2V has unspecified vulnerabilities",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/266091"
      },
      {
        "title": "Moxa Camera VPort 06EC-2V Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=151215"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-125",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilities"
      },
      {
        "trust": 1.7,
        "url": "https://www.moxa.com/en/"
      },
      {
        "trust": 0.1,
        "url": "https://ieeexplore.ieee.org/abstract/document/10769424"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/125.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-25848"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-25848"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-05-21T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "date": "2021-05-10T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-25848"
      },
      {
        "date": "2021-05-10T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      },
      {
        "date": "2021-05-10T11:15:07.937000",
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-05-21T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      },
      {
        "date": "2021-05-18T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-25848"
      },
      {
        "date": "2021-05-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      },
      {
        "date": "2021-05-18T19:57:49.490000",
        "db": "NVD",
        "id": "CVE-2021-25848"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Moxa Camera VPort 06EC-2V has unspecified vulnerabilities",
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-36217"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-496"
      }
    ],
    "trust": 0.6
  }
}
CVE-2021-25848 (GCVE-0-2021-25848)

Vulnerability from cvelistv5 – Published: 2021-05-10 10:42 – Updated: 2024-08-03 20:11
Summary
Severity ?
No CVSS data available.
CWE
Assigner
mitre
References
URL
Sightings

Author	Source	Type	Date
Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Detection rules are retrieved from Rulezet.
Action not permitted

VAR-202105-0810

CVE-2021-25848 (GCVE-0-2021-25848)

Tags

Sightings

Nomenclature
