Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 12 products
@Sh4hdov This differs from CVE-2024-3661, a VPN traffic leak via DHCP option 121, also in FortiClient. #CVE2024
Post summary
The tweet references CVE-2024-3661, noting it involves a VPN traffic leak via DHCP option 121 in FortiClient, but offers no further technical depth or additional context.
CVE-2024-3661 にハマった。 理屈は分かるが、悪用のハードルは高い気がする。 要は Free Wi-Fi とかホテル、ネカフェなんかの信頼出来ないネットワークを使うんじゃねぇ！😡と…… しかしコレの対応をされているとVPNトンネルの重ねがけみたいなコトが難しくなるな😰 VPNトンネルを張ってる間はルート追加を禁止する対応をしている製品がある……
Post summary
The post notes the CVE‑2024‑3661 vulnerability, suggests it is hard to exploit, warns against using untrusted networks, and references a mitigation that blocks routing during a VPN tunnel, but provides no PoC, exploit, or detailed technical info.
24 of 24 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| App | cisco | anyconnect_vpn_client | - | - | - |
| App | cisco | secure_client | - | - | - |
| App | citrix | secure_access_client | - | - | - |
| App | f5 | big-ip_access_policy_manager | - | - | - |
| App | fortinet | forticlient | - | linux | - |
| App | fortinet | forticlient | - | macos | - |
| App | fortinet | forticlient | - | windows | - |
| App | fortinet | forticlient | 7.4.0 | linux | - |
| App | fortinet | forticlient | 7.4.0 | macos | - |
| App | fortinet | forticlient | 7.4.0 | windows | - |
| OS | linux | linux_kernel | - | - | - |
| App | paloaltonetworks | globalprotect | - | iphone_os | - |
| App | paloaltonetworks | globalprotect | - | linux | - |
| App | paloaltonetworks | globalprotect | - | macos | - |
| App | paloaltonetworks | globalprotect | - | windows | - |
| App | watchguard | ipsec_mobile_vpn_client | - | macos | - |
| App | watchguard | ipsec_mobile_vpn_client | - | windows | - |
| App | watchguard | mobile_vpn_with_ssl | - | macos | - |
| App | watchguard | mobile_vpn_with_ssl | - | windows | - |
| App | zscaler | client_connector | - | linux | - |
| App | zscaler | client_connector | - | macos | - |
| App | zscaler | client_connector | - | windows | - |