What’s Vulnerable › Vulnerabilities

CVE-2021-25846

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-10 · updated 2026-06-17
• Weakness: CWE-191

Description

Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.

Affected products

• Moxa Vport 06Ec-2V26M Firmware: through 1.1
• Moxa Vport 06Ec-2V36M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V36M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V36M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V42M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V42M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V42M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V42M Firmware: through 1.1
• Moxa Vport 06Ec-2V60M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V60M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V60M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V60M Firmware: through 1.1
• Moxa Vport 06Ec-2V80M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V80M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V80M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V80M Firmware: through 1.1

References

• https://www.moxa.com/en/
• https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilities
• https://www.moxa.com/en/
• https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilities

Get alerted when CVE-2021-25846 or the next vulnerability affects your stack