← Back

CVE-2021-27862

nvd nist
Published: Sep 27, 2022Modified: Nov 4, 2025

JSON object

Loading...
4.7
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).

Affected (2)

Products: Ieee: Ieee 802.2 · Ietf: P802.1q
Ieee
1 product
Ieee 802.2
Ietf
1 product
P802.1q
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ieee 802.2
Up to 802.2h-1997
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
P802.1q
Up to d1.0

Related CWEs

CWE-130
Improper Handling of Length Parameter Inconsistency
The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.
CWE-290
Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (9)

Source: cret@cert.org
Source: cret@cert.org
Vendor Advisory
Source: cret@cert.org
Source: cret@cert.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.