CVE-2024-3661 — DHCP routing options can manipulate interface-based VPN traffic
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced t…
Published: 2024-05-06 · CVSS: 7.6 · CVSS 3.1
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7