HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-3661

CVSS 7.6v3.1pub. 2024-05-06upd. 2025-01-15

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Apple iOS
OS
Apple
all versions
Apple macOS
OS
Apple
all versions
Cisco Anyconnect Vpn Client
APP
Cisco
all versions
Cisco Secure Client
APP
Cisco
all versions
Citrix Secure Access Client
APP
Citrix
< 24.8.5< 24.06.1
F5 Big Ip Access Policy Manager
APP
F5
7.2.3 – 7.2.517.1.0 – 17.1.215.1.0 – 15.1.1016.1.0 – 16.1.5
Fortinet Forticlient
APP
Fortinet
7.4.06.4.0 – 7.2.5 (excl.)
Linux Kernel
OS
Linux
all versions
Palo Alto Networks Globalprotect
APP
Paloaltonetworks
all versions
Watchguard Ipsec Mobile Vpn Client
APP
Watchguard
all versions
Watchguard Mobile Vpn With Ssl
APP
Watchguard
all versions
Zscaler Client Connector
APP
Zscaler
< 1.5.1.25< 4.2.0.2823.7 – 3.7.0.134 (excl.)