Moxa Vport 06ec-2v42m-T Firmware vulnerabilities

5 CVEs affecting Moxa Vport 06ec-2v42m-T Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-25849, published 2021-05-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-25848, published 2021-05-10. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop…
CVE-2021-25847, published 2021-05-10. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop…
CVE-2021-25849, published 2021-05-10. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp…
CVE-2021-25846, published 2021-05-10. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the…
CVE-2021-25845, published 2021-05-10. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via…