NetSight
IP …
high7.6

CVE-2024-3661

DHCP can add routes to a client’s routing table via the classless static route option (121).

Impact

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

Affected products

VendorProductAffected versions
FortinetForticlient
from 6.4.0 before 7.2.5
Version 7.4.0
CiscoAnyconnect Vpn Client
All versions
CiscoSecure Client
All versions
PaloaltonetworksGlobalprotect
All versions
CitrixSecure Access Client
before 24.06.1
before 24.8.5
F5Big-Ip Access Policy Manager
from 7.2.3 through 7.2.5
from 15.1.0 through 15.1.10
from 16.1.0 through 16.1.5
from 17.1.0 through 17.1.2
WatchguardIpsec Mobile Vpn Client
All versions
WatchguardMobile Vpn With Ssl
All versions
ZscalerClient Connector
before 1.5.1.25
before 4.2.0.282
from 3.7 before 3.7.0.134
All versions

Weakness classification

CWE-306CWE-501

References