Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2839▼ 348 respecto a la semana anterior
Críticas / altas1378▼ 43 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)1.1%—Moxa Vport 06ec-2v26m FirmwareMoxa Vport 06ec-2v36m-t FirmwareMoxa Vport 06ec-2v36m-ct FirmwareMoxa Vport 06ec-2v36m-ct-t Firmware+1210/5/202117/6/2026
An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet.
ModificadaCrítica (9.1)1.2%—Moxa Vport 06ec-2v26m FirmwareMoxa Vport 06ec-2v36m-t FirmwareMoxa Vport 06ec-2v36m-ct FirmwareMoxa Vport 06ec-2v36m-ct-t Firmware+1210/5/202117/6/2026
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.
ModificadaCrítica (9.1)1.2%—Moxa Vport 06ec-2v26m FirmwareMoxa Vport 06ec-2v36m-t FirmwareMoxa Vport 06ec-2v36m-ct FirmwareMoxa Vport 06ec-2v36m-ct-t Firmware+1210/5/202117/6/2026
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet.
ModificadaAlta (7.5)1.1%—Moxa Vport 06ec-2v26m FirmwareMoxa Vport 06ec-2v36m-t FirmwareMoxa Vport 06ec-2v36m-ct FirmwareMoxa Vport 06ec-2v36m-ct-t Firmware+1210/5/202117/6/2026
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.
ModificadaAlta (7.5)1.0%—Moxa Vport 06ec-2v26m FirmwareMoxa Vport 06ec-2v36m-t FirmwareMoxa Vport 06ec-2v36m-ct FirmwareMoxa Vport 06ec-2v36m-ct-t Firmware+1210/5/202117/6/2026
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet.
Orbitaley — Vulnerabilidades