CVE-2024-7596 is a medium-severity vulnerability affecting Proposed Generic UDP Encapsulation (GUE) (IETF Draft) implementations, allowing attackers to spoof and route arbitrary network traffic. This flaw stems from a lack of source validation, enabling access control bypass and other network anomalies. With a CVSS score of 6.5, exploitation requires high attack complexity but can lead to partial confidentiality, integrity, and availability impacts. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:ietf:generic_udp_encapsulation:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.