Description
Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.
CVSS Metrics
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- Attack Vector
- adjacent network
- Complexity
- low
- Privileges
- none
- User Action
- none
- Scope
- changed
- Confidentiality
- none
- Integrity
- low
- Availability
- none
- Weaknesses
- CWE-290CWE-290
Metadata
- Primary Vendor
- IEEE
- Published
- 9/27/2022
- Last Modified
- 11/4/2025
- Source
- NIST NVD
- Note: Verify all details with official vendor sources before applying patches.
Affected Products
ieee : ieee_802.2ietf : p802.1qcisco : catalyst_6503-e_firmwarecisco : catalyst_6504-e_firmwarecisco : catalyst_6506-e_firmwarecisco : catalyst_6509-e_firmwarecisco : catalyst_6509-neb-a_firmwarecisco : catalyst_6509-v-e_firmwarecisco : catalyst_6513-e_firmwarecisco : catalyst_6807-xl_firmwarecisco : catalyst_6840-x_firmwarecisco : catalyst_6880-x_firmwarecisco : catalyst_c6816-x-le_firmwarecisco : catalyst_c6824-x-le-40g_firmwarecisco : catalyst_c6832-x-le_firmwarecisco : catalyst_c6840-x-le-40g_firmwarecisco : catalyst_6800ia_firmwarecisco : ios_xecisco : ios_xecisco : ios_xecisco : ios_xecisco : ios_xecisco : meraki_ms390_firmwarecisco : meraki_ms210_firmwarecisco : meraki_ms225_firmwarecisco : meraki_ms250_firmwarecisco : meraki_ms350_firmwarecisco : meraki_ms355_firmwarecisco : meraki_ms410_firmwarecisco : meraki_ms420_firmwarecisco : meraki_ms425_firmwarecisco : meraki_ms450_firmwarecisco : nexus_93180yc-ex_firmwarecisco : nexus_93180yc-fx_firmwarecisco : nexus_93180yc-fx3_firmwarecisco : nexus_93240yc-fx2_firmwarecisco : nexus_93360yc-fx2_firmwarecisco : nexus_93120tx_firmwarecisco : nexus_93108tc-ex_firmwarecisco : nexus_9348gc-fxp_firmwarecisco : nexus_93108tc-fx_firmwarecisco : nexus_93108tc-fx3p_firmwarecisco : nexus_93216tc-fx2_firmwarecisco : n9k-c9316d-gx_firmwarecisco : n9k-c93600cd-gx_firmwarecisco : n9k-c9332d-gx2b_firmwarecisco : n9k-c9348d-gx2a_firmwarecisco : n9k-c9364d-gx2a_firmwarecisco : n9k-x97160yc-ex_firmwarecisco : n9k-x9788tc-fx_firmwarecisco : n9k-x9564px_firmwarecisco : n9k-x9464px_firmwarecisco : n9k-x9564tx_firmwarecisco : n9k-x9464tx2_firmwarecisco : nexus_9636pq_firmwarecisco : nexus_x9636q-r_firmwarecisco : nexus_9536pq_firmwarecisco : nexus_9432pq_firmwarecisco : nexus_9736pq_firmwarecisco : n9k-x9736c-fx_firmwarecisco : n9k-x9732c-ex_firmwarecisco : n9k-x9732c-fx_firmwarecisco : n9k-x9736c-ex_firmwarecisco : n9k-x9636c-rx_firmwarecisco : n9k-x9636c-r_firmwarecisco : n9k-x9432c-s_firmwarecisco : nexus_9716d-gx_firmwarecisco : nexus_9504_firmwarecisco : nexus_9508_firmwarecisco : nexus_9516_firmwarecisco : nexus_92160yc-x_firmwarecisco : nexus_9272q_firmwarecisco : nexus_92304qc_firmwarecisco : nexus_9236c_firmwarecisco : nexus_92300yc_firmwarecisco : nexus_92348gc-x_firmwarecisco : nexus_9364c_firmwarecisco : nexus_9336c-fx2_firmwarecisco : nexus_9336c-fx2-e_firmwarecisco : nexus_9332c_firmwarecisco : nexus_9364c-gx_firmwarecisco : nexus_9800_firmwarecisco : sf500-24_firmwarecisco : sf-500-24mp_firmwarecisco : sf500-24p_firmwarecisco : sf500-48_firmwarecisco : sf500-48mp_firmwarecisco : sf500-18p_firmwarecisco : sg500-28_firmwarecisco : sg500-28mpp_firmwarecisco : sg500-28p_firmwarecisco : sg500-52_firmwarecisco : sg500-52mp_firmwarecisco : sg500-52p_firmwarecisco : sg500x-24_firmwarecisco : sg500x-24mpp_firmwarecisco : sg500x-24p_firmwarecisco : sg500x-48_firmwarecisco : sg500x-48mpp_firmwarecisco : sg500x-48p_firmware
AI-Powered Remediation
Generate remediation guidance or a C-suite brief for this vulnerability.