Lucene search

[email protected]CVE-2021-27853

HistorySep 27, 2022 - 6:15 p.m.

CVE-2021-27853

2022-09-2718:15:00

CWE-290

[email protected]

web.nvd.nist.gov

cve

2021

27853

network filtering

bypass

vlan

llc

snap

headers

nvd

4.7 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

25.8%

JSON

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.

CPENameOperatorVersion
ieee:ieee_802.2ieee ieee 802.2le802.2h-1997
ietf:p802.1qietf p802.1qled1.0
cisco:catalyst_6503-e_firmwarecisco catalyst 6503-e firmwareeq15.5\(01.01.85\)sy07
cisco:catalyst_6504-e_firmwarecisco catalyst 6504-e firmwareeq15.5\(01.01.85\)sy07
cisco:catalyst_6506-e_firmwarecisco catalyst 6506-e firmwareeq15.5\(01.01.85\)sy07
cisco:catalyst_6509-e_firmwarecisco catalyst 6509-e firmwareeq15.5\(01.01.85\)sy07
cisco:catalyst_6509-neb-a_firmwarecisco catalyst 6509-neb-a firmwareeq15.5\(01.01.85\)sy07
cisco:catalyst_6509-v-e_firmwarecisco catalyst 6509-v-e firmwareeq15.5\(01.01.85\)sy07
cisco:catalyst_6513-e_firmwarecisco catalyst 6513-e firmwareeq15.5\(01.01.85\)sy07
cisco:catalyst_6807-xl_firmwarecisco catalyst 6807-xl firmwareeq15.5\(01.01.85\)sy07

CPE	Name	Operator	Version
ieee:ieee_802.2	ieee ieee 802.2	le	802.2h-1997
ietf:p802.1q	ietf p802.1q	le	d1.0
cisco:catalyst_6503-e_firmware	cisco catalyst 6503-e firmware	eq	15.5\(01.01.85\)sy07
cisco:catalyst_6504-e_firmware	cisco catalyst 6504-e firmware	eq	15.5\(01.01.85\)sy07
cisco:catalyst_6506-e_firmware	cisco catalyst 6506-e firmware	eq	15.5\(01.01.85\)sy07
cisco:catalyst_6509-e_firmware	cisco catalyst 6509-e firmware	eq	15.5\(01.01.85\)sy07
cisco:catalyst_6509-neb-a_firmware	cisco catalyst 6509-neb-a firmware	eq	15.5\(01.01.85\)sy07
cisco:catalyst_6509-v-e_firmware	cisco catalyst 6509-v-e firmware	eq	15.5\(01.01.85\)sy07
cisco:catalyst_6513-e_firmware	cisco catalyst 6513-e firmware	eq	15.5\(01.01.85\)sy07
cisco:catalyst_6807-xl_firmware	cisco catalyst 6807-xl firmware	eq	15.5\(01.01.85\)sy07

Rows per page:

1-10 of 1001

References

blog.champtar.fr/VLAN0_LLC_SNAP/

datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/

kb.cert.org/vuls/id/855201

standards.ieee.org/ieee/802.1Q/10323/

standards.ieee.org/ieee/802.2/1048/

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-VU855201-J3z8CKTX

Social References

4.7 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

25.8%

JSON

Related for CVE-2021-27853

redhatcve1 prion1 f51 cisco1 arista1 cert1