CVE-2024-3661
High
Description
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.
SeverityHigh
CVSS7.6
Exploit probability—
Product
Zscaler Client Connector
PublishedMay 6, 2024
First seenMay 6, 2024
How to fix
Update
- zscaler client_connector1.5.1.25, 4.2.0.282, 3.7.0.134 or later
- fortinet forticlient7.2.5 or later
- citrix secure_access_client24.06.1, 24.8.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zscaler client_connector | v < 1.5.1.25, v < 4.2.0.282, 3.7 ≤ v < 3.7.0.134, No range specified | 1.5.1.25, 4.2.0.282, 3.7.0.134 |
| fortinet forticlient | 6.4.0 ≤ v < 7.2.5, 7.4.0 | 7.2.5 |
| cisco anyconnect_vpn_client | No range specified | — |
| cisco secure_client | No range specified | — |
| paloaltonetworks globalprotect | No range specified | — |
| citrix secure_access_client | v < 24.06.1, v < 24.8.5 | 24.06.1, 24.8.5 |
| f5 big-ip_access_policy_manager | 7.2.3 ≤ v ≤ 7.2.5, 15.1.0 ≤ v ≤ 15.1.10, 16.1.0 ≤ v ≤ 16.1.5, 17.1.0 ≤ v ≤ 17.1.2 | — |
| watchguard ipsec_mobile_vpn_client | No range specified | — |
| watchguard mobile_vpn_with_ssl | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.