The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement (RA), and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct man-in-the-middle attacks on communication with external IPv4 servers via vectors involving RAs, a DHCPv6 server, and NAT-PT on the local network, aka a "SLAAC Attack." NOTE: it can be argued that preferring IPv6 complies with RFC 3484, and that attempting to determine the legitimacy of an RA is currently outside the scope of recommended behavior of host operating systems
This public preview summarizes the normalized record without exposing paid citation paths. Use it to decide whether the device deserves a paid report, workspace review, or direct source verification.
Public pages show source names and record counts. Paid reports unlock source URLs, citation paths, and report-generation context.
For records that need deeper review, use the main access flow to request source-backed report context, saved workspace review, or support before relying on the public preview.
Security records are triage intelligence and should be validated against asset inventory, firmware versions, compensating controls, and vendor advisories.
Prioritize known exploited and high-confidence records.
Check support and vulnerability signals before purchase.
Use reports and monitors for customer device review.
Paid reports include citation paths and report-generation context; public previews intentionally hide source URLs.