title: L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation
description: Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.
problem types: CWE-290: Authentication Bypass by Spoofing
affected:
{
vendor: IETF
product: P802.1Q
versions:
version: D1.0, status: affected, lessThanOrEqual: D1.0, versionType: custom
}
{
vendor: IETF
product: draft-ietf-v6ops-ra-guard
versions:
version: 08, status: affected, lessThanOrEqual: 08, versionType: custom
}
{
vendor: IEEE
product: 802.2
versions:
version: 802.2h-1997, status: affected, lessThanOrEqual: 802.2h-1997, versionType: custom
}
