Description
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IEEE | 802.2 | 802.2h-1997 – ≤ 802.2h-1997 | — |
| IETF | draft-ietf-v6ops-ra-guard-08 | 08 – ≤ 08 | — |
Advisories 1
- WID-SEC-2022-1551 Layer 2 Netzwerksicherheitskontrollen: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 4, 2023