CVE-2006-6265: Microsoft Teredo

Medium severity, CVSS 5.8. EPSS: 4.5% chance of exploitation in the next 30 days.

Teredo clients, when located behind a restricted NAT, allow remote attackers to establish an inbound connection without the guessing required to find a port mapping for a traditional restricted NAT client, by (1) using the client port number contained in the Teredo address or (2) following the bubble-to-open procedure.

Affected products

• Microsoft Teredo: any version

Published 2006-12-04. Last modified 2026-06-16.