CVE-2025-23018: medium-severity vulnerability in IETF IPv6
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
IPv4 and IPv6 tunneling protocols don't verify where network packets actually come from, allowing attackers to fake the origin and redirect traffic through exposed network connections. This matters because it can be used to bypass security controls and reach systems that shouldn't be accessible.
RFC 2473 IPv4-in-IPv6 and IPv6-in-IPv6 tunneling implementations lack source packet validation, enabling IP spoofing attacks. An attacker with network access to an exposed tunneling interface can inject crafted packets with forged source addresses and route arbitrary traffic to unintended destinations, potentially bypassing firewall rules and network segmentation controls.
In the same product, most dangerous first.