IETF

Records21All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

IETF records in CISA KEV

TI-2023-13920 Service Location Protocol (SLP) Denial-of-Service Vulnerability CRITICAL 90KEV 2023-11-08 TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability CRITICAL 90KEV 2023-10-10

Components

Products in the NVD configurations · select one to filter the records

Ipv6 4 records MEDIUM P802.1q 4 records LOW Public Key Cryptography Standards #1 2 records LOW Generic Routing Encapsulation 1 record LOW Generic Routing Encapsulation6 1 record LOW Generic Udp Encapsulation 1 record LOW Http 1 record CRITICAL Internet Key Exchange 1 record LOW

Records

4 records in P802.1q · all components

TI-2021-09220 CVE-2021-27862 · GHSA-4fhf-8ph3-pp6c

Authentication bypass by spoofing in IEEE 802.2

LOW 23

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00688 Published 2022-09-27 No fix listed CWE-130

TI-2021-09219 CVE-2021-27861 · GHSA-wcc2-hc4j-m2wc

L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

LOW 23

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers)

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00663 Published 2022-09-27 No fix listed CWE-130

TI-2021-09212 CVE-2021-27854 · GHSA-433g-q37h-7crr

L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation

LOW 23

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00714 Published 2022-09-27 No fix listed CWE-290

TI-2021-09211 CVE-2021-27853 · GHSA-v8jg-p3fp-g968

L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

LOW 23

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00813 Published 2022-09-27 No fix listed CWE-290

Open these records in search →

Critical	2
High	6
Medium	13
Low	0
No CVSS	0