L2 network security controls can be bypassed using VLAN 0 stacking and/or 802.3 headers

[dtaht]

I am worrying that at least some openwrt hardware might be vulnerable to: https://kb.cert.org/vuls/id/855201