CVE-2024-34947

The ICMP redirect attack involves sending crafted ICMP 'Redirect' type packets to a vulnerable network device. The device, accepting these packets without proper verification, updates its routing table according to the instructions contained in the packets. As a result, network traffic can be redirected through a host controlled by the attacker, enabling a man-in-the-middle attack. The vulnerability (CWE-941) results from improper specification of allowed control message types.

An attacker can intercept, eavesdrop on, or modify network traffic passing through the device (man-in-the-middle attack), as well as disrupt service availability by redirecting traffic to false addresses. Combined with high confidentiality and integrity ratings, this can lead to data leakage and unauthorized modification of network communications.

Patches available from the manufacturer should be applied in accordance with the references. As a temporary workaround, it is recommended to disable the acceptance of ICMP redirect packets on the device and restrict access to the device from external networks using a firewall.

Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 version 3.7.10 x64 Build202401261655