CVE-2006-1651: Microsoft Isa Server

High severity, CVSS 7.5. EPSS: 15% chance of exploitation in the next 30 days.

Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol.

Affected products

• Microsoft Isa Server: version 2004 only

Published 2006-04-06. Last modified 2026-06-16.