L2 network security controls can be bypassed using VLAN 0 stacking and/or 802.3 headers

Overview

Layer-2 (L2) network security controls provided by various devices, such as switches, routers, and operating systems, can be bypassed by stacking Ethernet protocol headers. An attacker can send crafted packets through vulnerable devices to cause Denial-of-service (DoS) or to perform a man-in-the-middle (MitM) attack against a target network.

Description

This vulnerability exists within Ethernet encapsulation protocols that allow for stacking of Virtual Local Area Network (VLAN) headers. Network standards such as IEEE 802.1Q-1998 and IEEE 802.3 define a system of tagging Ethernet frames that help isolate networks to provide virtual networking capability. IEEE standard 802.1ad, also known as QinQ, allows for the stacking of these VLAN tags, extending the VLAN capability into multiple network segments. This widely adopted Ethernet feature is also referred to as “provider bridging” and “stacked VLANs”. In order to properly isolate and protect these virtual networks, many network devices and operating systems provide an L2 network filtering capability. It is important to note that in modern computing environments , such as Cloud based virtualization and virtual networking, the L2 network capability is extended beyond the local area networks. This can lead to exposure of this vulnerabilities in unintended ways to the larger Internet.

The identified vulnerabilities allow an attacker to bypass the security controls by stacking encapsulating headers. This is done by stacking a combination of one or more VLAN 0 (priority tag) headers and 802.2 LLC/SNAP headers. An attacker can send these crafted network packets and exploit vulnerable devices by bypassing their inspection and filtering capabilities. Some examples of bypassed L2 inspections include, but are not limited to, Dynamic ARP inspection, IPv6 Neighbor Discovery (ND) protection, and IPv6 RA Guard.

CVE-2021-27853 Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.

CVE-2021-27854 Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers in Ethernet to Wifi frame translation and the reverse Wifi to Ethernet.

CVE-2021-27861 Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers).

CVE-2021-27862 Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).

Impact

An attacker can bypass security controls and deceive a locally connected target host to route traffic to arbitrary destinations. Victim devices experience either a DoS (blackholing traffic) or MitM (observing the unencrypted traffic and maybe breaking encryption).

Solution

Apply Updates

Install vendor-provided patches and updates to ensure malicious content is blocked or rejected by the security controls (such as RA Guard), thereby blocking router advertisements or other network configuration related advertisements that originate on host ports.

Inspect and Block Router Advertisements

Utilize the interface security controls on your router or managed switch to perform DHCP snooping, IPv6 RA guard, IP source guard, and ARP/ND inspection. It is also recommended to only allow needed protocol on access ports (ARP/ICMP/IPv4/IPv6), some applications may have additional needs so be prepared to modify the allow list as needed.

Acknowledgements

Thanks to Etienne Champetier for reporting this vulnerability.

This document was written by Timur Snoke.

Vendor Information

855201

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Arista Networks __ Affected

Notified: 2021-08-23 Updated: 2022-09-28

Statement Date: September 27, 2022

CVE-2021-27853	Affected
CVE-2021-27854	Affected CVE-2021-27861

Vendor Statement

Arista Networks has products affected by these issues. Complete details, including how to fix the issue, can be found at: https://www.arista.com/en/support/advisories-notices/security-advisory/16276-security-advisory-0080

Cisco __ Affected

Notified: 2021-02-02 Updated: 2022-09-28

Statement Date: September 01, 2022

CVE-2021-27853	Affected
CVE-2021-27854	Not Affected Vendor Statement:
Cisco will provide an advisory and update on affected products via a Cisco Security Advisory.
CVE-2021-27861	Affected CVE-2021-27862

Vendor Statement

Cisco will publish an advisory regarding affected products and versions once the embargo is lifted. PSIRT-0213940748

Juniper Networks __ Affected

Notified: 2021-02-02 Updated: 2022-11-07

Statement Date: November 07, 2022

CVE-2021-27853	Affected
Vendor Statement:
For devices using IPv6 RA Guard or devices using DHCP security services please upgrade to these releases if there is a concern: Junos OS 21.2R3-S3, 21.3R3-S1, 21.4R2-S2, 21.4R3, 22.1R1-S2, 22.1R2, 22.1R3, 22.2R2, 22.3R1, 22.4R1, or subsequent releases. There are no workarounds.
CVE-2021-27854	Affected Vendor Statement:
For devices using IPv6 RA Guard or devices using DHCP security services please upgrade to these releases if there is a concern: Junos OS 21.2R3-S3, 21.3R3-S1, 21.4R2-S2, 21.4R3, 22.1R1-S2, 22.1R2, 22.1R3, 22.2R2, 22.3R1, 22.4R1, or subsequent releases. There are no workarounds.
CVE-2021-27861	Unknown CVE-2021-27862

Vendor Statement

For devices using IPv6 RA Guard or devices using DHCP security services please upgrade to these releases if there is a concern: Junos OS 21.2R3-S3, 21.3R3-S1, 21.4R2-S2, 21.4R3, 22.1R1-S2, 22.1R2, 22.1R3, 22.2R2, 22.3R1, 22.4R1, or subsequent releases. There are no workarounds.

Actiontec Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: August 30, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Advantech Czech __ Not Affected

Notified: 2021-08-31 Updated: 2022-09-27

Statement Date: September 07, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

Advantech ICR-xxxx products don’t provide bridge VLAN firewalling.

Android Open Source Project __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 19, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

After review it has been determined that the Android OS has no security impact from these vulnerabilities.

Aruba Networks Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 07, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

AVM GmbH __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 23, 2022

CVE-2021-27853	Not Affected
Vendor Statement:
AVM products do not offer layer 2 security features and therefore those cannot be bypassed either.
CVE-2021-27854	Not Affected Vendor Statement:
AVM products do not offer layer 2 security features and therefore those cannot be bypassed either.
CVE-2021-27861	Not Affected Vendor Statement:
AVM products do not offer layer 2 security features and therefore those cannot be bypassed either.
CVE-2021-27862	Not Affected Vendor Statement:
AVM products do not offer layer 2 security features and therefore those cannot be bypassed either.

Barracuda Networks Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 24, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Brocade Communication Systems __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: November 10, 2021

CVE-2021-27853	Not Affected
Vendor Statement:
No Brocade Fibre Channel Products from Broadcom products are currently known to be affected by this vulnerability.
CVE-2021-27854	Not Affected Vendor Statement:
No Brocade Fibre Channel Products from Broadcom products are currently known to be affected by this vulnerability.
CVE-2021-27861	Unknown CVE-2021-27862

Vendor Statement

No Brocade Fibre Channel Products from Broadcom products are currently known to be affected by this vulnerability.

Check Point Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: October 12, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Cradlepoint Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 20, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Dell Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 21, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Dell SecureWorks Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: August 25, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Deutsche Telekom __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 07, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have no Switches produced by any vendors for us

Digi International __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 23, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

we believe we are not susceptible to this attack due to design differences within our products.

D-Link Systems Inc. __ Not Affected

Notified: 2021-08-23 Updated: 2023-01-03

Statement Date: December 27, 2022

CVE-2021-27853	Not Affected
Vendor Statement:
D-Link is aware of the vulnerability and is investigating.
CVE-2021-27854	Not Affected Vendor Statement:
D-Link is aware of the vulnerability and is investigating.
CVE-2021-27861	Not Affected CVE-2021-27862

eCosCentric __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 07, 2022

CVE-2021-27853	Not Affected
Vendor Statement:
Do not support VLAN capability in supported stack
CVE-2021-27854	Not Affected Vendor Statement:
Do not support VLAN capability in supported stack
CVE-2021-27861	Not Affected CVE-2021-27862

Fastly Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 17, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

HCC Embedded Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: December 15, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

HP Inc. __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 23, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

The teams at HP Inc. has confirmed that none of our products are affected by these issues.

Intel Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 01, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

lwIP Not Affected

Notified: 2021-08-23 Updated: 2022-09-28

Statement Date: September 28, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

McAfee Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 22, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

MikroTik __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: January 24, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

MikroTik devices do no support IPv6 RA guard and are not affected.

Miredo Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 19, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Muonics Inc. __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-29

Statement Date: September 28, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

This vulnerability is not applicable to any Muonics, Inc. products that exist at this time.

netsnmp Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: August 24, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NVIDIA Not Affected

Notified: 2022-01-21 Updated: 2022-09-27

Statement Date: September 12, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

OpenWRT __ Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: August 23, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

OpenWrt does not support Layer 2 security features like RA Guard and is not affected by this problem.

Paessler Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: April 22, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Palo Alto Networks Not Affected

Notified: 2021-08-23 Updated: 2023-06-14

Statement Date: May 25, 2023

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Peplink Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: June 07, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

QNAP Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: August 30, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Red Hat __ Not Affected

Notified: 2021-02-05 Updated: 2022-09-27

Statement Date: August 25, 2021

CVE-2021-27853	Not Affected
Vendor Statement:
There is no vulnerability in the Linux kernel itself, there is a lot of way to misuse the filtering facilities provided by the kernel and do insecure filtering rules, but you also have everything to do actual secure rules.
CVE-2021-27854	Not Affected Vendor Statement:
There is no vulnerability in the Linux kernel itself, there is a lot of way to misuse the filtering facilities provided by the kernel and do insecure filtering rules, but you also have everything to do actual secure rules.
CVE-2021-27861	Unknown CVE-2021-27862

Sierra Wireless Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: October 12, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Sophos Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: October 07, 2021

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Synology __ Not Affected

Notified: 2021-08-23 Updated: 2022-10-03

Statement Date: October 03, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

None of Synology’s products are affected by CVE-2021-27853, CVE-2021-27854, CVE-2021-27861, and CVE-2021-27862 as these vulnerabilities only affect when Layer 2 security features like RA Guard is implemented.

Treck Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: June 22, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Untangle Not Affected

Notified: 2021-08-23 Updated: 2022-10-25

Statement Date: October 24, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Wind River Not Affected

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: September 27, 2022

CVE-2021-27853	Not Affected
CVE-2021-27854	Not Affected CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Ceragon Networks Inc Unknown

Notified: 2021-08-23 Updated: 2022-09-27

Statement Date: October 17, 2021

CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Microsoft __ Unknown

Notified: 2021-02-11 Updated: 2022-09-27

Statement Date: April 13, 2021

CVE-2021-27853	Unknown
CVE-2021-27854	Unknown Vendor Statement:
This was addressed as part of the April Patch Tuesday release.
References:

• <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28444&gt;
  CVE-2021-27861| Unknown CVE-2021-27862| Unknown

A10 Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ACCESS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Actelis Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ADATA Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ADTRAN Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Advantech B-B Technology Unknown

Notified: 2021-08-31 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Advantech Taiwan Unknown

Notified: 2021-08-31 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Aerohive Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

AhnLab Inc Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

AirWatch Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Akamai Technologies Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Alcatel-Lucent Enterprise Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Allied Telesis Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Alpine Linux Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Altran Intelligent Systems Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Amazon Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ANTlabs Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Apple Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Arch Linux Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ARRIS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ASUSTeK Computer Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Atheros Communications Inc Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

AT&T Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Avaya Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Belden Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Belkin Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Bell Canada Enterprises Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

BlackBerry Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Blackberry QNX Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

BlueCat Networks Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Blue Coat Systems Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Blunk Microsystems Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

BoringSSL Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Broadcom Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Buffalo Technology Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Cambium Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

CA Technologies Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Cirpack Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

CMX Systems Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Comcast Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Commscope Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Contiki OS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Cricket Wireless Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Cypress Semiconductor Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

CZ.NIC Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

dd-wrt Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Debian GNU/Linux Unknown

Notified: 2021-02-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Dell EMC Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

DesktopBSD Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Devicescape Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

dnsmasq Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

DragonFly BSD Project Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

eero Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

EfficientIP Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ENEA Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Ericsson Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Espressif Systems Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

European Registry for Internet Domains Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Express Logic Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Extreme Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

F5 Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Fedora Project Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

FNet Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Force10 Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Fortinet Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

FreeBSD Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

FreeRTOS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

F-Secure Corporation Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Gentoo Linux Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

GFI Software Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

GNU adns Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

GNU glibc Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Google Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Grandstream Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Green Hills Software Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

HardenedBSD Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Hewlett Packard Enterprise Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Hitachi Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Honeywell Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

HTC Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Huawei Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

IBM Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

IBM Corporation (zseries) Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

IBM Numa-Q Division (Formerly Sequent) Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ICASI Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Illumos Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Infoblox Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

InfoExpress Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Inmarsat Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Internet Initiative Japan Inc. Unknown

Notified: 2021-10-29 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Internet Systems Consortium Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Internet Systems Consortium - DHCP Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

IP Infusion Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

JH Software Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Joyent Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

JPCERT/CC Vulnerability Handling Team Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

LANCOM Systems GmbH Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Lancope Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Lantronix Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Lenovo Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

LG Electronics Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

LibreSSL Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Linksys Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

LITE-ON Technology Corporation Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

LiteSpeed Technologies Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Lynx Software Technologies Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

m0n0wall Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Marconi Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Marvell Semiconductor Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

MediaTek Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Medtronic Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Men & Mice Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Metaswitch Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Microchip Technology Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Micro Focus Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Mitel Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Motorola Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

National Cyber Security Center Netherlands Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

National Cyber Security Centre Finland Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NCSC-FI Vulnerability Coordinator Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NEC Corporation Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NetBSD Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NetBurner Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NetComm Wireless Limited Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NETGEAR Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NETSCOUT Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

netsnmpj Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Nexenta Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NIKSUN Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Nixu Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

NLnet Labs Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Nokia Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

OleumTech Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

OpenBSD Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

OpenConnect Ltd Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

OpenDNS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

OpenIndiana Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

OpenSSL Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Openwall GNU/*/Linux Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Oracle Corporation Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Oryx Embedded Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

pfSense Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Philips Electronics Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Phoenix Contact Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

PHPIDS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

PowerDNS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Proxim Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Pulse Secure Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

QLogic Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Quadros Systems Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Quagga Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Qualcomm Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Quantenna Communications Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Riverbed Technologies Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Roku Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Ruckus Wireless Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Ruijie Networks Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Samsung Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Samsung Mobile Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Samsung Semiconductor Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Schneider Electric Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Secure64 Software Corporation Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

SEIKO EPSON Corp. / Epson America Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Slackware Linux Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

SMC Networks Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

SmoothWall Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Snort Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

SonicWall Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Sonos Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Sony Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Sourcefire Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

SUSE Linux Unknown

Notified: 2021-02-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Symantec Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

systemd Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

TCPWave Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

TDS Telecom Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Technicolor Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Tenable Network Security Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

The OpenBSD project Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

TippingPoint Technologies Inc. Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Tizen Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Toshiba Commerce Solutions Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

TP-LINK Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

TrueOS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Turbolinux Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Ubiquiti Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Ubuntu Unknown

Notified: 2021-02-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Unisys Corporation Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Univention Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

VMware Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Vultures List Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

WizNET Technology Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

wolfSSL Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Xiaomi Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

XigmaNAS Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Xilinx Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Zebra Technologies Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Zephyr Project Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

ZTE Corporation Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

Zyxel Unknown

Notified: 2021-08-23 Updated: 2022-09-27 CVE-2021-27853	Unknown
CVE-2021-27854	Unknown CVE-2021-27861

Vendor Statement

We have not received a statement from the vendor.

View all 243 vendors __View less vendors __

References

• <https://blog.champtar.fr/VLAN0/&gt;
• <https://blog.champtar.fr/VLAN0_LLC_SNAP/&gt;
• <https://lore.kernel.org/netdev/CAOdf3grDKBkYmt54ZAzG1zZ6zz1JXeoHSv67_Fc9-nRiY662mQ@mail.gmail.com/&gt;
• <https://bugs.launchpad.net/neutron/+bug/1884341&gt;
• <https://standards.ieee.org/standard/802_1Q-1998.html&gt;
• <https://standards.ieee.org/standard/802_2-1985.html&gt;
• <https://standards.ieee.org/standard/802_3-2018.html&gt;
• <https://standards.ieee.org/standard/802_1ad-2005.html&gt;
• <https://blogs.nwkings.com/what-is-dai-dynamic-arp-inspection/&gt;
• <https://datatracker.ietf.org/doc/rfc4861/&gt;
• <https://datatracker.ietf.org/doc/html/rfc6105&gt;
• <https://www.ieee802.org/1/files/public/docs2022/q-rev-seaman-priority-in-tags-0122-v0.pdf&gt;
• <https://www.ieee802.org/1/files/public/docs2022/q-rev-seaman-vlan-tag-encoding-ppt-0122-v0.pdf&gt;

Other Information

CVE IDs:	CVE-2021-27853 CVE-2021-27854 CVE-2021-27861 CVE-2021-27862
API URL:	VINCE JSON
Date Public:	2022-09-27 Date First Published: