CVE-2021-27861: medium-severity vulnerability in IEEE 802.2
L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Network devices that filter Layer 2 traffic (like IPv6 RA guard) can be bypassed by crafting packets with malformed LLC/SNAP headers and optional VLAN0 tags. This allows an attacker to send traffic that should have been blocked.
CVE-2021-27861 exploits improper validation of LLC/SNAP header lengths in Layer 2 filtering mechanisms; by sending packets with invalid lengths and stacked VLAN0 headers, an attacker can bypass security controls like IPv6 RA guard. The vulnerability requires network access to send crafted frames and affects devices relying on L2 packet inspection without proper header validation.
In the same product, most dangerous first.