CVE-2024-3661

CVE-2024-3661, dubbed "TunnelVision," is a vulnerability in DHCP that allows an attacker on the local network to manipulate a client's routing table via the classless static route option (121). This can force VPN-protected traffic to leak over the physical interface, affecting a wide range of products including Apple, Cisco, Fortinet, Linux, and Palo Alto Networks. With a CVSS score of 7.6 (HIGH), the vulnerability has an adjacent attack vector and low attack complexity, potentially leading to high confidentiality impact and low integrity/availability impact. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness.