Riskcovery

CVE-2021-27862

L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

State
Published
Severity
4.7 Medium
Published
Sep 27, 2022
Updated
Nov 4, 2025
Reserved
Mar 1, 2021

Read the record on cve.org

Description

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NCISA-ADP

Weaknesses

  • CWE-130 Improper Handling of Length Parameter
  • CWE-290 Authentication Bypass by Spoofing

Affected Products

ProductVersions
802.2IEEE
  • 802.2h-1997 through 802.2h-1997Affected
draft-ietf-v6ops-ra-guard-08IETF
  • 08 through 08Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.