Skip to main content

IPv6 Vulnerability

A vulnerability has been discovered in the mechanisms of IPv6 transition which allow the set-up of egress communication channels over an IPv4-only or dual-stack Network Intrusion Detection System (NIDS).
Threat ID:
CC-1385
Category:
Exploit
Threat Severity:
Low
Threat Vector:
Insecure network
Published:
4 May 2017 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

This content has been archived

This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk

Summary

A vulnerability has been discovered in the mechanisms of IPv6 transition which allow the set-up of egress communication channels over an IPv4-only or dual-stack Network Intrusion Detection System (NIDS).

Threat details

Techniques for evading NIDS based on mobile IPv6 implementations reveal that it is possible to trick NIDS using Dynamically-Changing Communication Channels and create a covert channel by hiding information within IPv6 and its extension headers. Protocol tunnelling and IPv6 tunnelling-based transition mechanisms pose a major security risk as they allow the by-passing of improperly-configured or IPv4-only network security devices.

This vulnerability will lead to attacks that can retrieve sensitive information and remotely take control of an affected system.

Remediation steps

Type Step
  • Security personnel should make themselves aware of the possible risks involved in IPv6 vulnerabilities.
  • Ensure all security devices and IPv4-only devices are properly configured.
  • Backups should be created including at least one off-network backup (e.g. to tape).

Last edited: 17 February 2020 11:32 am