4.7
Medium
CVE-2021-27853 Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of…
Description
Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 802.2 | 802.2h-1997 | No fix stated |
| draft-ietf-v6ops-ra-guard | 08 | No fix stated |
| P802.1Q | Versions not published |
References
- datatracker.ietf.org datatracker.ietf.org
- standards.ieee.org standards.ieee.org
- standards.ieee.org standards.ieee.org
- 20220927 Vulnerabilities in Layer 2 Network Security Controls Affecting Cisco Products: September 2022 tools.cisco.com
- kb.cert.org kb.cert.org
- blog.champtar.fr blog.champtar.fr
Timeline
- Published
- Last modified
Other CVEs of 802.2
The 4 CVEs of 802.2 →
CVE-2021-27862
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid…
4.7
Medium
CVE-2021-27861
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid…
4.7
Medium
CVE-2021-27854
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers,…
4.7
Medium