Vendor
IETF
20 known vulnerabilities in products by IETF, 1 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products | 7.5 | |
| Critical | CVE-2024-3596 | IETF RFC: security vulnerability | 9.0 | |
| Critical | CVE-2004-2761 | IETF Md5: Spoofing | 9.8 | |
| High | CVE-2024-3661 | DHCP routing options can manipulate interface-based VPN traffic | 7.6 | |
| Medium | CVE-2020-10136 | IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic | 5.3 | |
| High | CVE-2016-10142 | IETF IPv6: security vulnerability | 8.6 | |
| High | CVE-2015-8960 | NetApp SnapDrive: security vulnerability | 8.1 | |
| Medium | CVE-2018-5389 | Strongswan: Authentication Bypass | 5.9 | |
| Medium | CVE-2024-7595 | GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet | 6.5 | |
| Not rated | CVE-2007-2242 | IETF IPv6: Denial of Service | — | |
| Medium | CVE-2024-7596 | IETF Draft-ietf-intarea-gue-09: Spoofing | 6.5 | |
| Medium | CVE-2025-23018 | IETF IPv6: Improper Verification of Source of a Communication Channel | 5.4 | |
| Medium | CVE-2025-23019 | IETF IPv6: Improper Verification of Source of a Communication Channel | 5.4 | |
| Medium | CVE-2020-20949 | IETF Public Key Cryptography Standards \#1: Information Disclosure | 5.9 | |
| Medium | CVE-2020-20950 | Microchip Libraries For Applications: Information Disclosure | 5.9 | |
| Medium | CVE-2021-27853 | L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers | 4.7 | |
| Medium | CVE-2025-27371 | IETF RFC 7523: Authentication Bypass by Primary Weakness | 6.9 | |
| Medium | CVE-2021-27854 | IETF P802.1Q: Authentication Bypass by Spoofing | 4.7 | |
| Medium | CVE-2021-27862 | IEEE 802.2: Improper Handling of Length Parameter Inconsistency | 4.7 | |
| Medium | CVE-2021-27861 | L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths | 4.7 |
News
- Hitachi Energy AFS, AFR and AFF Seriescisa-advisories,
- SSA-794185 V1.0: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SIPROTEC, SICAM and Related Productssiemens-productcert
- SSA-723487 V1.0: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Productssiemens-productcert
Products
| IETF IPv6 | 4 | 0 |
| IETF P802.1Q | 4 | 0 |
| Draft-ietf-v6ops-ra-guard | 3 | 0 |