CVE search · CVE-2021-27853
CVE-2021-27853
medium 4.7
Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cret@cert.org
- Weakness
- CWE-290
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 4.7 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
nvd@nist.govPrimary |
| CVSS 3.1 | medium 4.7 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- ieee · ieee_802.2
- ietf · p802.1q
- cisco · catalyst_6503-e_firmware
- cisco · catalyst_6504-e_firmware
- cisco · catalyst_6506-e_firmware
- cisco · catalyst_6509-e_firmware
- cisco · catalyst_6509-neb-a_firmware
- cisco · catalyst_6509-v-e_firmware
- cisco · catalyst_6513-e_firmware
- cisco · catalyst_6807-xl_firmware
- cisco · catalyst_6840-x_firmware
- cisco · catalyst_6880-x_firmware
- cisco · catalyst_c6816-x-le_firmware
- cisco · catalyst_c6824-x-le-40g_firmware
- cisco · catalyst_c6832-x-le_firmware
- cisco · catalyst_c6840-x-le-40g_firmware
- cisco · catalyst_6800ia_firmware
- cisco · ios_xe
- cisco · meraki_ms390_firmware
- cisco · meraki_ms210_firmware
- cisco · meraki_ms225_firmware
- cisco · meraki_ms250_firmware
- cisco · meraki_ms350_firmware
- cisco · meraki_ms355_firmware
- cisco · meraki_ms410_firmware
- cisco · meraki_ms420_firmware
- cisco · meraki_ms425_firmware
- cisco · meraki_ms450_firmware
- cisco · nexus_93180yc-ex_firmware
- cisco · nexus_93180yc-fx_firmware
- cisco · nexus_93180yc-fx3_firmware
- cisco · nexus_93240yc-fx2_firmware
- cisco · nexus_93360yc-fx2_firmware
- cisco · nexus_93120tx_firmware
- cisco · nexus_93108tc-ex_firmware
- cisco · nexus_9348gc-fxp_firmware
- cisco · nexus_93108tc-fx_firmware
- cisco · nexus_93108tc-fx3p_firmware
- cisco · nexus_93216tc-fx2_firmware
- cisco · n9k-c9316d-gx_firmware
- cisco · n9k-c93600cd-gx_firmware
- cisco · n9k-c9332d-gx2b_firmware
- cisco · n9k-c9348d-gx2a_firmware
- cisco · n9k-c9364d-gx2a_firmware
- cisco · n9k-x97160yc-ex_firmware
- cisco · n9k-x9788tc-fx_firmware
- cisco · n9k-x9564px_firmware
- cisco · n9k-x9464px_firmware
- cisco · n9k-x9564tx_firmware
- cisco · n9k-x9464tx2_firmware
- cisco · nexus_9636pq_firmware
- cisco · nexus_x9636q-r_firmware
- cisco · nexus_9536pq_firmware
- cisco · nexus_9432pq_firmware
- cisco · nexus_9736pq_firmware
- cisco · n9k-x9736c-fx_firmware
- cisco · n9k-x9732c-ex_firmware
- cisco · n9k-x9732c-fx_firmware
- cisco · n9k-x9736c-ex_firmware
- cisco · n9k-x9636c-rx_firmware
- cisco · n9k-x9636c-r_firmware
- cisco · n9k-x9432c-s_firmware
- cisco · nexus_9716d-gx_firmware
- cisco · nexus_9504_firmware
- cisco · nexus_9508_firmware
- cisco · nexus_9516_firmware
- cisco · nexus_92160yc-x_firmware
- cisco · nexus_9272q_firmware
- cisco · nexus_92304qc_firmware
- cisco · nexus_9236c_firmware
- cisco · nexus_92300yc_firmware
- cisco · nexus_92348gc-x_firmware
- cisco · nexus_9364c_firmware
- cisco · nexus_9336c-fx2_firmware
- cisco · nexus_9336c-fx2-e_firmware
- cisco · nexus_9332c_firmware
- cisco · nexus_9364c-gx_firmware
- cisco · nexus_9800_firmware
- cisco · sf500-24_firmware
- cisco · sf-500-24mp_firmware
- cisco · sf500-24p_firmware
- cisco · sf500-48_firmware
- cisco · sf500-48mp_firmware
- cisco · sf500-18p_firmware
- cisco · sg500-28_firmware
- cisco · sg500-28mpp_firmware
- cisco · sg500-28p_firmware
- cisco · sg500-52_firmware
- cisco · sg500-52mp_firmware
- cisco · sg500-52p_firmware
- cisco · sg500x-24_firmware
- cisco · sg500x-24mpp_firmware
- cisco · sg500x-24p_firmware
- cisco · sg500x-48_firmware
- cisco · sg500x-48mpp_firmware
- cisco · sg500x-48p_firmware
References
- https://blog.champtar.fr/VLAN0_LLC_SNAP/ExploitThird Party Advisory
- https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/Technical DescriptionThird Party Advisory
- https://kb.cert.org/vuls/id/855201Third Party AdvisoryUS Government Resource
- https://standards.ieee.org/ieee/802.1Q/10323/Vendor Advisory
- https://standards.ieee.org/ieee/802.2/1048/Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-VU855201-J3z8CKTXThird Party Advisory
- https://blog.champtar.fr/VLAN0_LLC_SNAP/ExploitThird Party Advisory
- https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/Technical DescriptionThird Party Advisory
- https://kb.cert.org/vuls/id/855201Third Party AdvisoryUS Government Resource
- https://standards.ieee.org/ieee/802.1Q/10323/Vendor Advisory
- https://standards.ieee.org/ieee/802.2/1048/Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-VU855201-J3z8CKTXThird Party Advisory
- https://www.kb.cert.org/vuls/id/855201