HIGH✓ PATCH🇬🇧 English

CVE-2024-3661

CVSS 7.6v3.1pub. 2024-05-06upd. 2025-01-15

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

oryginał EN

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Apple iOS
OS
Apple
wszystkie wersje
Apple macOS
OS
Apple
wszystkie wersje
Cisco Anyconnect Vpn Client
APP
Cisco
wszystkie wersje
Cisco Secure Client
APP
Cisco
wszystkie wersje
Citrix Secure Access Client
APP
Citrix
< 24.8.5< 24.06.1
F5 Big Ip Access Policy Manager
APP
F5
7.2.3 – 7.2.517.1.0 – 17.1.215.1.0 – 15.1.1016.1.0 – 16.1.5
Fortinet Forticlient
APP
Fortinet
7.4.06.4.0 – 7.2.5 (bez)
Linux Kernel
OS
Linux
wszystkie wersje
Palo Alto Networks Globalprotect
APP
Paloaltonetworks
wszystkie wersje
Watchguard Ipsec Mobile Vpn Client
APP
Watchguard
wszystkie wersje
Watchguard Mobile Vpn With Ssl
APP
Watchguard
wszystkie wersje
Zscaler Client Connector
APP
Zscaler
< 1.5.1.25< 4.2.0.2823.7 – 3.7.0.134 (bez)