11299 matches found
CVE-2021-27861
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...
CVE-2021-27854
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse...
Design/Logic Flaw
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse...
Design/Logic Flaw
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...
Code injection
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...
CVE-2021-27862
CVE-2021-27862 is a Layer 2 network filtering bypass vulnerability where IPv6 RA/RA guard-like filtering can be bypassed via LLC/SNAP headers with invalid length and Ethernet-to-WiFi frame translation (and optionally VLAN0 headers). Public documents confirm exposure across vendor devices (e.g., C...
CVE-2021-27861 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...
CVE-2021-27861
CVE-2021-27861 is a Layer 2 security bypass where IPv6 RA guard/other L2 filters can be bypassed by LLC/SNAP headers with invalid length, optionally combined with VLAN0 headers. The Arista advisory (CVE-2021-27861) specifies affected Arista EOS platforms and Wi‑Fi APs, describing two variants: VL...
CVE-2021-27853
Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...
多款Cisco产品安全漏洞
Cisco IOS and others are products of Cisco USA.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XR is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system.Cisco IOS XE Software is an operating system.Cisco IOS...
多款Cisco产品安全漏洞
Cisco NX-OS Software and others are products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.Cisco IOS is an operating system developed for its network devices.Cisco IOS XE Software is an operating system.Cisco IOS XE Software is...
PT-2022-9876 · Ieee +1 · 802.2 +3
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows Layer 2 network filtering capabilities, such as IPv6 RA guard, to be bypassed. This can be achieved by using specific combinations of VLAN 0 headers, LLC/SNAP...
PT-2022-9877 · Cisco · Cisco Ios +2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows Layer 2 network filtering capabilities, such as IPv6 RA guard, to be bypassed. This can be achieved by using LLC/SNAP headers with...
PT-2022-9878 · Ieee +1 · 802.2 +3
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows Layer 2 network filtering capabilities, such as IPv6 RA guard, to be bypassed. This can be achieved by utilizing LLC/SNAP headers with...
多款Cisco产品安全漏洞
Cisco NX-OS Software and others are products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.Cisco IOS is an operating system developed for its network devices.Cisco IOS XE Software is an operating system.Cisco IOS XE Software is...
L2 network security controls can be bypassed using VLAN 0 stacking and/or 802.3 headers
Overview Layer-2 L2 network security controls provided by various devices, such as switches, routers, and operating systems, can be bypassed by stacking Ethernet protocol headers. An attacker can send crafted packets through vulnerable devices to cause Denial-of-service DoS or to perform a...
PT-2022-6973 · D Link · D-Link Dap-1325
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: The issue is related to the SetHostIPv6Settings function of the D-Link DAP-1325 wireless signal amplifier's firmware, which does not properly neutralize special elements. This allow...
EulerOS Virtualization 2.9.0 : curl (EulerOS-SA-2022-2377)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated...
OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI
Impact - Attacker providing malicious redirect uri can cause DoS to oauthlib's web application. - Attacker can also leverage usage of urivalidate functions depending where it is used. What kind of vulnerability is it? Who is impacted? Oauthlib applications using OAuth2.0 provider support or use...
