CVE-2021-25848: Moxa Vport 06ec-2v26m Firmware

Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.

Affected products

• Moxa Vport 06ec-2v26m Firmware: up to and including 1.1
• Moxa Vport 06ec-2v36m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v36m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v36m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v42m Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v60m Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m-Ct-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m-Ct Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m-T Firmware: up to and including 1.1
• Moxa Vport 06ec-2v80m Firmware: up to and including 1.1

Published 2021-05-10. Last modified 2026-06-17.