The vulnerability of the Ethernet encapsulation protocol lies in its ability to combine headers, which allows attackers to trigger a service failure or execute a Middleware Interception Attack (MITM).

🗓️ 28 Sep 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Ethernet encapsulation allows header combination enabling attackers to cause service failures or a man in the middle attack.

Reporter	Title	Published	Views	Family All 17
Arista	Security Advisory 0080	27 Sep 202200:00	–	arista
Circl	CVE-2021-27853	27 Sep 202222:28	–	circl
Cisco	Vulnerabilities in Layer 2 Network Security Controls Affecting Cisco Products: September 2022	27 Sep 202216:00	–	cisco
CNNVD	多款Cisco产品安全漏洞	27 Sep 202200:00	–	cnnvd
CVE	CVE-2021-27853	27 Sep 202217:55	–	cve
Cvelist	CVE-2021-27853 L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers	27 Sep 202217:55	–	cvelist
EUVD	EUVD-2021-14591	7 Oct 202500:30	–	euvd
F5 Networks	K45012151: Layer 2 security bypass issue CVE-2021-27861, CVE-2021-27862, CVE-2021-27853, CVE-2021-27854	21 Feb 202318:54	–	f5
Ivanti	SA45654 - Multiple OpenSSL Vulnerabilities in Layer 2 network filtering capabilities	14 Feb 202307:22	–	ivanti
NCSC	Researcher discovered vulnerabilities in Layer-2 managed switches	28 Sep 202200:00	–	ncsc

Vulners

Node

juniper_networks junosRange<21.2r3-s3

OR

juniper_networks junosRange<21.3r3-s1

OR

juniper_networks junosRange<21.4r2-s2

OR

juniper_networks junosRange<21.4r3

OR

juniper_networks junosRange<22.1r1-s2

OR

juniper_networks junosRange<22.1r2

OR

juniper_networks junosRange<22.1r3

OR

juniper_networks junosRange<22.2r2

OR

juniper_networks junosRange<22.3r1

OR

juniper_networks junosRange<22.1r3-evo

OR

juniper_networks junosRange<22.2r2-evo

OR

juniper_networks junosRange<22.3r1-evo

OR

juniper_networks junosRange<22.4r1-evo

Source	Link
datatracker	www.datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/
standards	www.standards.ieee.org/ieee/802.1Q/10323/
standards	www.standards.ieee.org/ieee/802.2/1048/
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-VU855201-J3z8CKTX
kb	www.kb.cert.org/vuls/id/855201
blog	www.blog.champtar.fr/VLAN0_LLC_SNAP/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2024 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 23.3

CVSS 34.7

EPSS0.0069

Ethernet encapsulation header combination service failures remote attackers man in the middle