Advisories · Technology

IETF P802.1Q.

Every CVE that names IETF P802.1Q among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-27861 CVE record

CVSS 4.7 Medium

L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths
- IEEE 802.2
- draft-ietf-v6ops-ra-guard
- Authentication bypass
- CWE-130
Not analysed yet 27 Sept 2022
CVE-2021-27854 CVE record

CVSS 4.7 Medium

L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation
- IETF P802.1Q
- draft-ietf-v6ops-ra-guard
- Authentication bypass
Not analysed yet 27 Sept 2022
CVE-2021-27853 CVE record

CVSS 4.7 Medium

L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers
- IEEE 802.2
- draft-ietf-v6ops-ra-guard
- Authentication bypass
Not analysed yet 27 Sept 2022