Lucene search

K
nvd[email protected]NVD:CVE-2021-27861
HistorySep 27, 2022 - 7:15 p.m.

CVE-2021-27861

2022-09-2719:15:09
CWE-290
CWE-130
web.nvd.nist.gov
cve-2021-27861
network filtering
ipv6 ra guard
llc/snap headers
vlan0 headers

4.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

39.4%

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers)

Affected configurations

NVD
Node
ieeeieee_802.2Range802.2h-1997
Node
ietfp802.1qRanged1.0

4.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

39.4%