CVE-2021-25845: Moxa Vport 06ec-2v26m Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet.

Affected products

• Moxa Vport 06ec-2v26m Firmware: version 1.1 only
• Moxa Vport 06ec-2v36m-Ct-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v36m-Ct Firmware: version 1.1 only
• Moxa Vport 06ec-2v36m-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v42m-Ct-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v42m-Ct Firmware: version 1.1 only
• Moxa Vport 06ec-2v42m-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v42m Firmware: version 1.1 only
• Moxa Vport 06ec-2v60m-Ct-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v60m-Ct Firmware: version 1.1 only
• Moxa Vport 06ec-2v60m-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v60m Firmware: version 1.1 only
• Moxa Vport 06ec-2v80m-Ct-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v80m-Ct Firmware: version 1.1 only
• Moxa Vport 06ec-2v80m-T Firmware: version 1.1 only
• Moxa Vport 06ec-2v80m Firmware: version 1.1 only

Published 2021-05-10. Last modified 2026-06-17.