Novel attack against virtually all VPN apps neuters their entire purpose
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-3661 | DHCP can add routes to a client’s routing table via the classless static route option (121) | 7.6 | 4% | PoC ×5 |
From the original article
3 min read at arstechnica.com
Researchers have devised an attack against nearly all virtual private network applications that forces them to send and receive some or all traffic outside of the encrypted tunnel designed to protect it from snooping or tampering.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.