Lucene search
HistorySep 27, 2022 - 7:15 p.m.
CVE-2021-27862
cve-2021-27862
network filtering bypass
llc/snap headers
ethernet to wifi
vlan0 headers
4.7 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
32.3%
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).
Affected configurations
Node
ieeeieee_802.2Range≤802.2h-1997
Node
ietfp802.1qRange≤d1.0
Related
cve
cve
CVE-2021-27862
2022-09-27 19:15:09
cvelist
cvelist
redhatcve
redhatcve
CVE-2021-27862
2022-10-02 16:19:07
prion
prion
Design/Logic Flaw
2022-09-27 19:15:00
cisco
cisco
f5
f5
arista
arista
Security Advisory 0080
2023-09-28 00:00:00
cert
cert
4.7 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
32.3%
Related for NVD:CVE-2021-27862