Detections
Analytics
Moxa VPort Cameras Out-of-bounds Read (CVE-2021-25848)
critical Tenable OT Security Plugin ID 505212
Synopsis
The remote OT asset is affected by a vulnerability.Description
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
Plugin Details
Severity: Critical
ID: 505212
File Name: tenable_ot_moxa_CVE-2021-25848.nasl
Version: 1.1
Type: remote
Family: Tenable.ot
Published: 3/6/2026
Updated: 3/6/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: High
Base Score: 8.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:C
CVSS Score Source: CVE-2021-25848
CVSS v3
Risk Factor: Critical
Base Score: 9.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Vulnerability Information
CPE: cpe:/o:moxa:vport_06ec-2v80m_firmware, cpe:/o:moxa:vport_06ec-2v80m-ct-t_firmware, cpe:/o:moxa:vport_06ec-2v42m-ct-t_firmware, cpe:/o:moxa:vport_06ec-2v36m-ct_firmware, cpe:/o:moxa:vport_06ec-2v80m-ct_firmware, cpe:/o:moxa:vport_06ec-2v60m_firmware, cpe:/o:moxa:vport_06ec-2v36m-ct-t_firmware, cpe:/o:moxa:vport_06ec-2v80m-t_firmware, cpe:/o:moxa:vport_06ec-2v42m_firmware, cpe:/o:moxa:vport_06ec-2v60m-ct_firmware, cpe:/o:moxa:vport_06ec-2v36m-t_firmware, cpe:/o:moxa:vport_06ec-2v26m_firmware, cpe:/o:moxa:vport_06ec-2v60m-ct-t_firmware, cpe:/o:moxa:vport_06ec-2v42m-ct_firmware, cpe:/o:moxa:vport_06ec-2v60m-t_firmware, cpe:/o:moxa:vport_06ec-2v42m-t_firmware
Required KB Items: Tenable.ot/Moxa
Exploit Ease: No known exploits are available
Patch Publication Date: 5/10/2021
Vulnerability Publication Date: 5/10/2021
Reference Information
CVE: CVE-2021-25848
CWE: 125