VULNERABILITY INTELLIGENCE

CVE-2024-3661

CVSS score7.6 HIGH
EPSS probability4.06%
CISA KEVNot currently listed
Published2024-05-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Description

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-306
  • nvd@nist.gov: CWE-306

Primary references