VulnerabilityModified

CVE-2021-25848

Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available…

CRITICAL 9.1EPSS 1.21%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.1: 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS: 1.21% probability · 68th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-125
Affected: moxa/vport 06ec-2v26m firmware · moxa/vport 06ec-2v36m-t firmware · moxa/vport 06ec-2v36m-ct firmware · moxa/vport 06ec-2v36m-ct-t firmware · moxa/vport 06ec-2v42m firmware · moxa/vport 06ec-2v42m-t firmware · moxa/vport 06ec-2v42m-ct firmware · moxa/vport 06ec-2v42m-ct-t firmware · moxa/vport 06ec-2v60m firmware · moxa/vport 06ec-2v60m-t firmware · moxa/vport 06ec-2v60m-ct firmware · moxa/vport 06ec-2v60m-ct-t firmware · moxa/vport 06ec-2v80m firmware · moxa/vport 06ec-2v80m-t firmware · moxa/vport 06ec-2v80m-ct firmware · moxa/vport 06ec-2v80m-ct-t firmware
Source: cve@mitre.org

EPSS trend

EPSS 1.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

https://www.moxa.com/en/Vendor Advisory
https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilitiesVendor Advisory
https://www.moxa.com/en/Vendor Advisory
https://www.moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-series-ip-cameras-vulnerabilitiesVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.