MEDIUM🇵🇱 Wersja polska

CVE-2024-7595

CVSS 6.5v3.1pub. 2025-02-05upd. 2025-11-03

GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can be considered similar to CVE-2020-10136.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

  • Ietf Generic Routing Encapsulation

    APP
    Ietf
    all versions

  • Ietf Generic Routing Encapsulation6

    APP
    Ietf
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2004-2761CRITICAL9.8PL ✓same vendor

Algorytm MD5 podatny na kolizje — fałszowanie certyfikatów X.509

CVE-2023-44487HIGH7.5⚠ KEVsame vendor

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can ...

CVE-2016-10142HIGH8.6same vendor

An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (Th...

CVE-2015-8960HIGH8.1same vendor

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh...

CVE-2007-2242HIGH7.8same vendor

The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (...