CVE-2021-25848

Name of the Vulnerable Software and Affected Versions Moxa Camera VPort 06EC-2V Series version 1.1

Description The issue arises from improper validation of the length field of LLDP-MED TLV in the userdisk/vport lldpd component, allowing information disclosure to attackers. This occurs due to the use of a fixed loop counter variable without checking the actual available length, which can be exploited via a crafted LLDP packet.

Recommendations For Moxa Camera VPort 06EC-2V Series version 1.1, consider implementing proper length validation for LLDP-MED TLV to prevent information disclosure. As a temporary workaround, restrict access to the userdisk/vport lldpd component to minimize the risk of exploitation.