CVE-2021-25849: Moxa Vport 06ec-2v26m Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet.

Affected products

  • Moxa Vport 06ec-2v26m Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v36m-Ct-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v36m-Ct Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v36m-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v42m-Ct-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v42m-Ct Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v42m-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v42m Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v60m-Ct-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v60m-Ct Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v60m-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v60m Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v80m-Ct-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v80m-Ct Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v80m-T Firmware: up to and including 1.1
  • Moxa Vport 06ec-2v80m Firmware: up to and including 1.1

Published 2021-05-10. Last modified 2026-06-17.