CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-3661

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.2%

CVSS Severity

CVSS v3 Score 7.6

References

Products affected by CVE-2024-3661

Cisco » Anyconnect Vpn Client » Version: N/A

cpe:2.3:a:cisco:anyconnect_vpn_client:-
Cisco » Secure Client » Version: N/A

cpe:2.3:a:cisco:secure_client:-
Citrix » Secure Access Client » Version: N/A

cpe:2.3:a:citrix:secure_access_client:-
Citrix » Secure Access Client » Version: 23.5.1.3

cpe:2.3:a:citrix:secure_access_client:23.5.1.3
F5 » Big-Ip Access Policy Manager » Version: 15.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.1
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.2

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.2
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.3

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.3
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.4

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.4
F5 » Big-Ip Access Policy Manager » Version: 15.1.0.5

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0.5
F5 » Big-Ip Access Policy Manager » Version: 15.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.1
F5 » Big-Ip Access Policy Manager » Version: 15.1.10

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.10
F5 » Big-Ip Access Policy Manager » Version: 15.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.2
F5 » Big-Ip Access Policy Manager » Version: 15.1.2.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.2.1
F5 » Big-Ip Access Policy Manager » Version: 15.1.3

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.3
F5 » Big-Ip Access Policy Manager » Version: 15.1.4

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.4
F5 » Big-Ip Access Policy Manager » Version: 15.1.4.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.4.1
F5 » Big-Ip Access Policy Manager » Version: 15.1.5

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.5
F5 » Big-Ip Access Policy Manager » Version: 15.1.5.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.5.1
F5 » Big-Ip Access Policy Manager » Version: 15.1.6

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.6
F5 » Big-Ip Access Policy Manager » Version: 15.1.7

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.7
F5 » Big-Ip Access Policy Manager » Version: 15.1.8

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.8
F5 » Big-Ip Access Policy Manager » Version: 15.1.8.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.8.1
F5 » Big-Ip Access Policy Manager » Version: 15.1.8.2

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.8.2
F5 » Big-Ip Access Policy Manager » Version: 15.1.9

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.9
F5 » Big-Ip Access Policy Manager » Version: 15.1.9.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.9.1
F5 » Big-Ip Access Policy Manager » Version: 16.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.0
F5 » Big-Ip Access Policy Manager » Version: 16.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.1
F5 » Big-Ip Access Policy Manager » Version: 16.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.2
F5 » Big-Ip Access Policy Manager » Version: 16.1.2.2

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.2.2
F5 » Big-Ip Access Policy Manager » Version: 16.1.3

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.3
F5 » Big-Ip Access Policy Manager » Version: 16.1.3.1

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.3.1
F5 » Big-Ip Access Policy Manager » Version: 16.1.3.3

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.3.3
F5 » Big-Ip Access Policy Manager » Version: 16.1.3.4

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.3.4
F5 » Big-Ip Access Policy Manager » Version: 16.1.3.5

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.3.5
F5 » Big-Ip Access Policy Manager » Version: 16.1.4

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.4
F5 » Big-Ip Access Policy Manager » Version: 16.1.4.1

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.4.1
F5 » Big-Ip Access Policy Manager » Version: 16.1.5

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.5
F5 » Big-Ip Access Policy Manager » Version: 17.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.0
F5 » Big-Ip Access Policy Manager » Version: 17.1.0.1

cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.0.1
F5 » Big-Ip Access Policy Manager » Version: 17.1.0.2

cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.0.2
F5 » Big-Ip Access Policy Manager » Version: 17.1.0.3

cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.0.3
F5 » Big-Ip Access Policy Manager » Version: 17.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.1
F5 » Big-Ip Access Policy Manager » Version: 17.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.2
F5 » Big-Ip Access Policy Manager » Version: 7.2.3

cpe:2.3:a:f5:big-ip_access_policy_manager:7.2.3
F5 » Big-Ip Access Policy Manager » Version: 7.2.4

cpe:2.3:a:f5:big-ip_access_policy_manager:7.2.4
F5 » Big-Ip Access Policy Manager » Version: 7.2.4.1

cpe:2.3:a:f5:big-ip_access_policy_manager:7.2.4.1
F5 » Big-Ip Access Policy Manager » Version: 7.2.4.4

cpe:2.3:a:f5:big-ip_access_policy_manager:7.2.4.4
F5 » Big-Ip Access Policy Manager » Version: 7.2.5

cpe:2.3:a:f5:big-ip_access_policy_manager:7.2.5
Fortinet » Forticlient » Version: 6.4.0

cpe:2.3:a:fortinet:forticlient:6.4.0
Fortinet » Forticlient » Version: 6.4.1

cpe:2.3:a:fortinet:forticlient:6.4.1
Fortinet » Forticlient » Version: 6.4.10

cpe:2.3:a:fortinet:forticlient:6.4.10
Fortinet » Forticlient » Version: 6.4.2

cpe:2.3:a:fortinet:forticlient:6.4.2
Fortinet » Forticlient » Version: 6.4.3

cpe:2.3:a:fortinet:forticlient:6.4.3
Fortinet » Forticlient » Version: 6.4.4

cpe:2.3:a:fortinet:forticlient:6.4.4
Fortinet » Forticlient » Version: 6.4.5

cpe:2.3:a:fortinet:forticlient:6.4.5
Fortinet » Forticlient » Version: 6.4.6

cpe:2.3:a:fortinet:forticlient:6.4.6
Fortinet » Forticlient » Version: 6.4.7

cpe:2.3:a:fortinet:forticlient:6.4.7
Fortinet » Forticlient » Version: 6.4.8

cpe:2.3:a:fortinet:forticlient:6.4.8
Fortinet » Forticlient » Version: 6.4.9

cpe:2.3:a:fortinet:forticlient:6.4.9
Fortinet » Forticlient » Version: 7.0.0

cpe:2.3:a:fortinet:forticlient:7.0.0
Fortinet » Forticlient » Version: 7.0.1

cpe:2.3:a:fortinet:forticlient:7.0.1
Fortinet » Forticlient » Version: 7.0.10

cpe:2.3:a:fortinet:forticlient:7.0.10
Fortinet » Forticlient » Version: 7.0.11

cpe:2.3:a:fortinet:forticlient:7.0.11
Fortinet » Forticlient » Version: 7.0.12

cpe:2.3:a:fortinet:forticlient:7.0.12
Fortinet » Forticlient » Version: 7.0.13

cpe:2.3:a:fortinet:forticlient:7.0.13
Fortinet » Forticlient » Version: 7.0.2

cpe:2.3:a:fortinet:forticlient:7.0.2
Fortinet » Forticlient » Version: 7.0.3

cpe:2.3:a:fortinet:forticlient:7.0.3
Fortinet » Forticlient » Version: 7.0.4

cpe:2.3:a:fortinet:forticlient:7.0.4
Fortinet » Forticlient » Version: 7.0.5

cpe:2.3:a:fortinet:forticlient:7.0.5
Fortinet » Forticlient » Version: 7.0.6

cpe:2.3:a:fortinet:forticlient:7.0.6
Fortinet » Forticlient » Version: 7.0.7

cpe:2.3:a:fortinet:forticlient:7.0.7
Fortinet » Forticlient » Version: 7.0.8

cpe:2.3:a:fortinet:forticlient:7.0.8
Fortinet » Forticlient » Version: 7.0.9

cpe:2.3:a:fortinet:forticlient:7.0.9
Fortinet » Forticlient » Version: 7.2.0

cpe:2.3:a:fortinet:forticlient:7.2.0
Fortinet » Forticlient » Version: 7.2.1

cpe:2.3:a:fortinet:forticlient:7.2.1
Fortinet » Forticlient » Version: 7.2.2

cpe:2.3:a:fortinet:forticlient:7.2.2
Fortinet » Forticlient » Version: 7.2.3

cpe:2.3:a:fortinet:forticlient:7.2.3
Fortinet » Forticlient » Version: 7.2.4

cpe:2.3:a:fortinet:forticlient:7.2.4
Fortinet » Forticlient » Version: 7.4.0

cpe:2.3:a:fortinet:forticlient:7.4.0
Paloaltonetworks » Globalprotect » Version: N/A

cpe:2.3:a:paloaltonetworks:globalprotect:-
Paloaltonetworks » Globalprotect » Version: 4.1.0

cpe:2.3:a:paloaltonetworks:globalprotect:4.1.0
Paloaltonetworks » Globalprotect » Version: 4.1.10

cpe:2.3:a:paloaltonetworks:globalprotect:4.1.10
Paloaltonetworks » Globalprotect » Version: 4.1.12

cpe:2.3:a:paloaltonetworks:globalprotect:4.1.12
Paloaltonetworks » Globalprotect » Version: 4.1.13

cpe:2.3:a:paloaltonetworks:globalprotect:4.1.13
Paloaltonetworks » Globalprotect » Version: 5.0

cpe:2.3:a:paloaltonetworks:globalprotect:5.0
Paloaltonetworks » Globalprotect » Version: 5.0.0

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.0
Paloaltonetworks » Globalprotect » Version: 5.0.10

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.10
Paloaltonetworks » Globalprotect » Version: 5.0.3

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.3
Paloaltonetworks » Globalprotect » Version: 5.0.4

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.4
Paloaltonetworks » Globalprotect » Version: 5.0.5

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.5
Paloaltonetworks » Globalprotect » Version: 5.0.6

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.6
Paloaltonetworks » Globalprotect » Version: 5.0.8

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.8
Paloaltonetworks » Globalprotect » Version: 5.0.9

cpe:2.3:a:paloaltonetworks:globalprotect:5.0.9
Paloaltonetworks » Globalprotect » Version: 5.1

cpe:2.3:a:paloaltonetworks:globalprotect:5.1
Paloaltonetworks » Globalprotect » Version: 5.1.0

cpe:2.3:a:paloaltonetworks:globalprotect:5.1.0
Paloaltonetworks » Globalprotect » Version: 5.1.1

cpe:2.3:a:paloaltonetworks:globalprotect:5.1.1
Paloaltonetworks » Globalprotect » Version: 5.1.2

cpe:2.3:a:paloaltonetworks:globalprotect:5.1.2
Paloaltonetworks » Globalprotect » Version: 5.1.4

cpe:2.3:a:paloaltonetworks:globalprotect:5.1.4
Paloaltonetworks » Globalprotect » Version: 5.1.8

cpe:2.3:a:paloaltonetworks:globalprotect:5.1.8
Paloaltonetworks » Globalprotect » Version: 5.1.9

cpe:2.3:a:paloaltonetworks:globalprotect:5.1.9
Paloaltonetworks » Globalprotect » Version: 5.2

cpe:2.3:a:paloaltonetworks:globalprotect:5.2
Paloaltonetworks » Globalprotect » Version: 5.2.0

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.0
Paloaltonetworks » Globalprotect » Version: 5.2.1

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.1
Paloaltonetworks » Globalprotect » Version: 5.2.10

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.10
Paloaltonetworks » Globalprotect » Version: 5.2.11

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.11
Paloaltonetworks » Globalprotect » Version: 5.2.12

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.12
Paloaltonetworks » Globalprotect » Version: 5.2.13

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.13
Paloaltonetworks » Globalprotect » Version: 5.2.2

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.2
Paloaltonetworks » Globalprotect » Version: 5.2.3

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.3
Paloaltonetworks » Globalprotect » Version: 5.2.4

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.4
Paloaltonetworks » Globalprotect » Version: 5.2.5

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.5
Paloaltonetworks » Globalprotect » Version: 5.2.6

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.6
Paloaltonetworks » Globalprotect » Version: 5.2.7

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.7
Paloaltonetworks » Globalprotect » Version: 5.2.8

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.8
Paloaltonetworks » Globalprotect » Version: 5.2.9

cpe:2.3:a:paloaltonetworks:globalprotect:5.2.9
Paloaltonetworks » Globalprotect » Version: 5.3

cpe:2.3:a:paloaltonetworks:globalprotect:5.3
Paloaltonetworks » Globalprotect » Version: 5.3.0

cpe:2.3:a:paloaltonetworks:globalprotect:5.3.0
Paloaltonetworks » Globalprotect » Version: 5.3.1

cpe:2.3:a:paloaltonetworks:globalprotect:5.3.1
Paloaltonetworks » Globalprotect » Version: 5.3.2

cpe:2.3:a:paloaltonetworks:globalprotect:5.3.2
Paloaltonetworks » Globalprotect » Version: 5.3.3

cpe:2.3:a:paloaltonetworks:globalprotect:5.3.3
Paloaltonetworks » Globalprotect » Version: 5.3.4

cpe:2.3:a:paloaltonetworks:globalprotect:5.3.4
Paloaltonetworks » Globalprotect » Version: 6.0.0

cpe:2.3:a:paloaltonetworks:globalprotect:6.0.0
Paloaltonetworks » Globalprotect » Version: 6.0.1

cpe:2.3:a:paloaltonetworks:globalprotect:6.0.1
Paloaltonetworks » Globalprotect » Version: 6.0.2

cpe:2.3:a:paloaltonetworks:globalprotect:6.0.2
Paloaltonetworks » Globalprotect » Version: 6.0.3

cpe:2.3:a:paloaltonetworks:globalprotect:6.0.3
Paloaltonetworks » Globalprotect » Version: 6.0.4

cpe:2.3:a:paloaltonetworks:globalprotect:6.0.4
Paloaltonetworks » Globalprotect » Version: 6.0.5

cpe:2.3:a:paloaltonetworks:globalprotect:6.0.5
Paloaltonetworks » Globalprotect » Version: 6.0.6

cpe:2.3:a:paloaltonetworks:globalprotect:6.0.6
Paloaltonetworks » Globalprotect » Version: 6.1.0

cpe:2.3:a:paloaltonetworks:globalprotect:6.1.0
Paloaltonetworks » Globalprotect » Version: 6.1.1

cpe:2.3:a:paloaltonetworks:globalprotect:6.1.1
Paloaltonetworks » Globalprotect » Version: 6.1.5

cpe:2.3:a:paloaltonetworks:globalprotect:6.1.5
Paloaltonetworks » Globalprotect » Version: 6.2.0

cpe:2.3:a:paloaltonetworks:globalprotect:6.2.0
Paloaltonetworks » Globalprotect » Version: 6.2.4

cpe:2.3:a:paloaltonetworks:globalprotect:6.2.4
Paloaltonetworks » Globalprotect » Version: 6.2.5

cpe:2.3:a:paloaltonetworks:globalprotect:6.2.5
Paloaltonetworks » Globalprotect » Version: 6.3.0

cpe:2.3:a:paloaltonetworks:globalprotect:6.3.0
Paloaltonetworks » Globalprotect » Version: 6.3.1

cpe:2.3:a:paloaltonetworks:globalprotect:6.3.1
Watchguard » Ipsec Mobile Vpn Client » Version: Any

cpe:2.3:a:watchguard:ipsec_mobile_vpn_client:*
Watchguard » Mobile Vpn With Ssl » Version: Any

cpe:2.3:a:watchguard:mobile_vpn_with_ssl:*
Zscaler » Client Connector » Version: N/A

cpe:2.3:a:zscaler:client_connector:-
Zscaler » Client Connector » Version: 1.3

cpe:2.3:a:zscaler:client_connector:1.3
Zscaler » Client Connector » Version: 1.3.0.31

cpe:2.3:a:zscaler:client_connector:1.3.0.31
Zscaler » Client Connector » Version: 1.3.1

cpe:2.3:a:zscaler:client_connector:1.3.1
Zscaler » Client Connector » Version: 1.3.1.6

cpe:2.3:a:zscaler:client_connector:1.3.1.6
Zscaler » Client Connector » Version: 1.4

cpe:2.3:a:zscaler:client_connector:1.4
Zscaler » Client Connector » Version: 1.4.0.105

cpe:2.3:a:zscaler:client_connector:1.4.0.105
Zscaler » Client Connector » Version: 1.4.0.58

cpe:2.3:a:zscaler:client_connector:1.4.0.58
Zscaler » Client Connector » Version: 3.6

cpe:2.3:a:zscaler:client_connector:3.6
Zscaler » Client Connector » Version: 3.7

cpe:2.3:a:zscaler:client_connector:3.7
Zscaler » Client Connector » Version: 3.7.0.182

cpe:2.3:a:zscaler:client_connector:3.7.0.182
Zscaler » Client Connector » Version: 3.7.0.183

cpe:2.3:a:zscaler:client_connector:3.7.0.183
Zscaler » Client Connector » Version: 3.7.1.42

cpe:2.3:a:zscaler:client_connector:3.7.1.42
Zscaler » Client Connector » Version: 3.7.1.48

cpe:2.3:a:zscaler:client_connector:3.7.1.48
Zscaler » Client Connector » Version: 3.7.1.49

cpe:2.3:a:zscaler:client_connector:3.7.1.49
Zscaler » Client Connector » Version: 3.9

cpe:2.3:a:zscaler:client_connector:3.9
Zscaler » Client Connector » Version: 3.9.0.81

cpe:2.3:a:zscaler:client_connector:3.9.0.81
Zscaler » Client Connector » Version: 3.9.0.90

cpe:2.3:a:zscaler:client_connector:3.9.0.90
Zscaler » Client Connector » Version: 3.9.0.95

cpe:2.3:a:zscaler:client_connector:3.9.0.95
Zscaler » Client Connector » Version: 4.1

cpe:2.3:a:zscaler:client_connector:4.1
Zscaler » Client Connector » Version: 4.2

cpe:2.3:a:zscaler:client_connector:4.2
Apple » Iphone Os » Version: N/A

cpe:2.3:o:apple:iphone_os:-
Apple » Macos » Version: N/A

cpe:2.3:o:apple:macos:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-3661

Products

Pricing

Contact Us