Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.6 | High | 3.1 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L | CNA (cisa-cg) |
- CISA KEV Not listed.
- EPSS 0.041, the 90th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- datatracker.ietf.org/doc/html/rfc2131#section-7
- datatracker.ietf.org/doc/html/rfc3442#section-7
- tunnelvisionbug.com/
- www.leviathansecurity.com/research/tunnelvision
- news.ycombinator.com/item?id=40279632
- arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/
- krebsonsecurity.com/2024/05/why-your-vpn-may-not-be-as-secure-as-it-claims/
- issuetracker.google.com/issues/263721377
- mullvad.net/en/blog/evaluating-the-impact-of-tunnelvision
- www.zscaler.com/blogs/security-research/cve-2024-3661-k-tunnelvision-exposes-vpn-bypass-vulnerability
- lowendtalk.com/discussion/188857/a-rogue-dhcp-server-within-your-network-can-and-will-hijack-your-vpn-traffic
- news.ycombinator.com/item?id=40284111
- www.agwa.name/blog/post/hardening_openvpn_for_def_con
- www.theregister.com/2024/05/07/vpn_tunnelvision_dhcp/
- support.citrix.com/article/CTX677069/cloud-software-group-security-advisory-for-cve20243661
- www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00009
- bst.cisco.com/quickview/bug/CSCwk05814
- security.paloaltonetworks.com/CVE-2024-3661
- fortiguard.fortinet.com/psirt/FG-IR-24-170
- my.f5.com/manage/s/article/K000139553