CVEvulnerability
CVE-2021-27853
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-09-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- Weaknesses
- CWE-290
Description
Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.
Affected configurations
• ieee ieee 802.2 (<= 802.2h-1997)
• ietf p802.1q (<= d1.0)
• cisco catalyst 6503-e firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6504-e firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6506-e firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6509-e firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6509-neb-a firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6509-v-e firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6513-e firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6807-xl firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6840-x firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6880-x firmware 15.5\(01.01.85\)sy07
• cisco catalyst c6816-x-le firmware 15.5\(01.01.85\)sy07
• cisco catalyst c6824-x-le-40g firmware 15.5\(01.01.85\)sy07
• cisco catalyst c6832-x-le firmware 15.5\(01.01.85\)sy07
• cisco catalyst c6840-x-le-40g firmware 15.5\(01.01.85\)sy07
• cisco catalyst 6800ia firmware 15.5\(01.01.85\)sy07
• cisco ios xe 17.3.3
• cisco ios xe 15.2\(07\)e02
• cisco ios xe 15.2\(07\)e03
• cisco ios xe 17.4.1
• cisco ios xe 17.6.1
• cisco meraki ms390 firmware
• cisco meraki ms210 firmware
• cisco meraki ms225 firmware
• cisco meraki ms250 firmware
• cisco meraki ms350 firmware
• cisco meraki ms355 firmware
• cisco meraki ms410 firmware
• cisco meraki ms420 firmware
• cisco meraki ms425 firmware
• cisco meraki ms450 firmware
• cisco nexus 93180yc-ex firmware 9.3\(5\)
• cisco nexus 93180yc-fx firmware 9.3\(5\)
• cisco nexus 93180yc-fx3 firmware 9.3\(5\)
• cisco nexus 93240yc-fx2 firmware 9.3\(5\)
• cisco nexus 93360yc-fx2 firmware 9.3\(5\)
• cisco nexus 93120tx firmware 9.3\(5\)
• cisco nexus 93108tc-ex firmware 9.3\(5\)
• cisco nexus 9348gc-fxp firmware 9.3\(5\)
• cisco nexus 93108tc-fx firmware 9.3\(5\)
• cisco nexus 93108tc-fx3p firmware 9.3\(5\)
• cisco nexus 93216tc-fx2 firmware 9.3\(5\)
• cisco n9k-c9316d-gx firmware 9.3\(5\)
• cisco n9k-c93600cd-gx firmware 9.3\(5\)
• cisco n9k-c9332d-gx2b firmware 9.3\(5\)
• cisco n9k-c9348d-gx2a firmware 9.3\(5\)
• cisco n9k-c9364d-gx2a firmware 9.3\(5\)
• cisco n9k-x97160yc-ex firmware 9.3\(5\)
• cisco n9k-x9788tc-fx firmware 9.3\(5\)
• cisco n9k-x9564px firmware 9.3\(5\)
• cisco n9k-x9464px firmware 9.3\(5\)
• cisco n9k-x9564tx firmware 9.3\(5\)
• cisco n9k-x9464tx2 firmware 9.3\(5\)
• cisco nexus 9636pq firmware 9.3\(5\)
• cisco nexus x9636q-r firmware 9.3\(5\)
• cisco nexus 9536pq firmware 9.3\(5\)
• cisco nexus 9432pq firmware 9.3\(5\)
• cisco nexus 9736pq firmware 9.3\(5\)
• cisco n9k-x9736c-fx firmware 9.3\(5\)
… and 40 more
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness
References
- https://blog.champtar.fr/VLAN0_LLC_SNAP/ Exploit, Third Party Advisory
- https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/ Technical Description, Third Party Advisory
- https://kb.cert.org/vuls/id/855201 Third Party Advisory, US Government Resource
- https://standards.ieee.org/ieee/802.1Q/10323/ Vendor Advisory
- https://standards.ieee.org/ieee/802.2/1048/ Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-VU855201-J3z8CKTX Third Party Advisory
- https://blog.champtar.fr/VLAN0_LLC_SNAP/ Exploit, Third Party Advisory
- https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/ Technical Description, Third Party Advisory
- https://kb.cert.org/vuls/id/855201 Third Party Advisory, US Government Resource
- https://standards.ieee.org/ieee/802.1Q/10323/ Vendor Advisory
- https://standards.ieee.org/ieee/802.2/1048/ Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-VU855201-J3z8CKTX Third Party Advisory
- https://www.kb.cert.org/vuls/id/855201 www.kb.cert.org