CVE-2006-1651 describes a vulnerability in Microsoft ISA Server 2004 where remote attackers could bypass filtering rules, specifically for ICMP and TCP, by utilizing IPv6 packets. This issue, however, has been disputed by a researcher who noted that ISA Server 2004 and Windows 2003 Basic Firewall do not support IPv6 filtering, implying it's a different network protocol. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing for potential partial compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2004CPE matchmatch criteria | cpe:2.3:a:microsoft:isa_server:2004:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.