Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2021-27861

20
FAUCET Score

CVE-2021-27861 describes a vulnerability allowing bypass of Layer 2 network filtering, specifically IPv6 RA guard, through the use of LLC/SNAP headers with invalid lengths, optionally combined with VLAN0 headers. This medium-severity vulnerability (CVSS 4.7, AV:A/AC:L) affects IEEE 802.2 and 802.1Q implementations, enabling potential denial-of-service or man-in-the-middle attacks within an adjacent network. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness within the cybersecurity landscape.

Impacted Technologies

VendorProductVersion(s)CPE
<= 802.2h-1997CPE matchmatch criteria
cpe:2.3:a:ieee:ieee_802.2:*:*:*:*:*:*:*:*
<= d1.0CPE matchmatch criteria
cpe:2.3:a:ietf:p802.1q:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.7MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.60%
Probability of exploitation in next 30 days
EPSS Percentile
44.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0060 is in the 70th percentile among its peer group of 1,802 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2021-27861Moderate

Kernel: Layer 2 network filtering capabilities bypass with invalid length (and optionally VLAN0 headers)

Sep 27, 2022

References

kb.cert.org / vuls/id/855201
blog.champtar.fr / VLAN0_LLC_SNAP
datatracker.ietf.org / doc/draft-ietf-v6ops-ra-guard/08
Third Party Advisory
kb.cert.org / vuls/id/855201
standards.ieee.org / ieee/802.1Q/10323
Third Party Advisory
standards.ieee.org / ieee/802.2/1048
Third Party Advisory