CVE-2021-25846: Moxa Vport 06ec-2v26m Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.

Affected products

• Moxa Vport 06ec-2v26m Firmware: up to and including 1.1
• Moxa Vport 06ec-2v36m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v36m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v36m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m Firmware: up to and including 1.1

Published 2021-05-10. Last modified 2026-06-17.