CVE-2021-27853
Assigner: certcc
Published: 2022-09-27T00:00:00
State: PUBLISHED
title: L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers
datePublic: 2022-09-27T00:00:00
descriptions: value: Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.
affected: vendor: IEEE
product: 802.2
versions: version: 802.2h-1997
status: affected
lessThanOrEqual: 802.2h-1997
versionType: custom
vendor: IETF
product: draft-ietf-v6ops-ra-guard
versions: version: 08
status: affected
lessThanOrEqual: 08
versionType: custom
vendor: IETF
product: P802.1Q
versions: version: D1.0
status: affected
lessThanOrEqual: D1.0
versionType: custom
credits: value: Etienne Champetier (@champtar) <champetier.etienne@gmail.com> 
problemTypes: descriptions: type: CWE
description: CWE-290: Authentication Bypass by Spoofing
cweId: CWE-290
source: discovery: EXTERNAL