IPv6-in-IPv4 Tunneling Vulnerability in Networking Products

CVE-2025-23019

Summary

The IPv6-in-IPv4 tunneling vulnerability allows attackers to exploit exposed network interfaces, enabling them to spoof and reroute traffic. This flaw stems from a lack of proper filtering and validation in the implementation of RFC 4213, which governs tunneling protocols. Attackers could potentially gain unauthorized access and manipulate network traffic, posing significant risks to data integrity and confidentiality. Organizations utilizing affected networking devices must implement immediate security measures to mitigate the associated risks and protect their infrastructures.

References