What’s Vulnerable › Vulnerabilities

CVE-2021-25848

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-10 · updated 2026-06-17
• Weakness: CWE-125

Description

Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.

Affected products

• Moxa Vport 06Ec-2V26M Firmware: through 1.1
• Moxa Vport 06Ec-2V36M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V36M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V36M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V42M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V42M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V42M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V42M Firmware: through 1.1
• Moxa Vport 06Ec-2V60M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V60M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V60M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V60M Firmware: through 1.1
• Moxa Vport 06Ec-2V80M-Ct-T Firmware: through 1.1
• Moxa Vport 06Ec-2V80M-Ct Firmware: through 1.1
• Moxa Vport 06Ec-2V80M-T Firmware: through 1.1
• Moxa Vport 06Ec-2V80M Firmware: through 1.1

References

• https://www.moxa.com/en/
• https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilities
• https://www.moxa.com/en/
• https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilities

Get alerted when CVE-2021-25848 or the next vulnerability affects your stack