Vulnerabilitymedium
Attackers may be using TunnelVision to snoop on users' VPN traffic (CVE-2024-3661)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-3661 | DHCP can add routes to a client’s routing table via the classless static route option (121) | 7.6 | 4% | PoC ×5 |
From the original article
3 min read at helpnetsecurity.com
Researchers have brought to light a new attack method – dubbed TunnelVision and uniquely identified as CVE-2024-3661 – that can be used to intercept and snoop on VPN users’ traffic by attackers who are on the same local network.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.