Vulnerabilitymedium
New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-3661 | DHCP can add routes to a client’s routing table via the classless static route option (121) | 7.6 | 4% | PoC ×5 |
From the original article
3 min read at thehackernews.com
Researchers have detailed a Virtual Private Network (VPN) bypass technique dubbed TunnelVision that allows threat actors to snoop on victim's network traffic by just being on the same local network. The "decloaking" method has been assigned the CVE identifier CVE-2024-3661 (CVSS score: 7. 6).
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.