Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2024-3661

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

CVSS 7.6 · HighBuzz score 27.5

Buzz score

Why this CVE is surfacing

Buzz score total 27.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 19.5 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
19.5
6 evidence mentions in the snapshot
Diversity score
8.0
3 sources across 1 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
6 source links · newest first
  • Fortinet Patches Code Execution Vulnerability in FortiOSSecurityWeek

    Fortinet has patched multiple vulnerabilities in FortiOS, including a high-severity code execution security flaw.

    newswww.securityweek.comJun 12, 2024, 12:45 PM
  • Security Affairs newsletter Round 471 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Ohio Lottery data breach impacted over 538,000 individuals Notorius threat actor IntelBroker claims the hack of […]

    newssecurityaffairs.comMay 12, 2024, 12:46 PM
  • Week in review: Veeam fixes RCE flaw in backup management platform, Patch Tuesday forecastHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Veeam fixes RCE flaw in backup management platform (CVE-2024-29212) Veeam has patched a high-severity vulnerability (CVE-2024-29212) in Veeam Service Provider Console (VSPC) and is urging customers to implement the patch. May 2024 Patch Tuesday forecast: A reminder of recent threats and impact The thunderstorms of April patches have passed, and it has been pretty calm leading up to May 2024 … More →

    newswww.helpnetsecurity.comMay 12, 2024, 8:00 AM
  • New TunnelVision technique can bypass the VPN encapsulationSecurity Affairs

    TunnelVision is a new VPN bypass technique that enables threat actors to spy on users’ traffic bypassing the VPN encapsulation. Leviathan Security researchers recently identified a novel attack technique, dubbed TunnelVision, to bypass VPN encapsulation. A threat actor can use this technique to force a target user’s traffic off their VPN tunnel using built-in features […]

    newssecurityaffairs.comMay 8, 2024, 6:21 PM
  • Attackers may be using TunnelVision to snoop on users’ VPN traffic (CVE-2024-3661)Help Net Security

    Researchers have brought to light a new attack method – dubbed TunnelVision and uniquely identified as CVE-2024-3661 – that can be used to intercept and snoop on VPN users’ traffic by attackers who are on the same local network. “This is particularly dangerous for people who rely on VPNs to keep them safe, such as journalists and political dissidents,” Leviathan Security researchers Dani Cronce and Lizzie Moratti explained. The attack is imperceptible to the regular … More →

    newswww.helpnetsecurity.comMay 8, 2024, 1:23 PM
  • New ‘TunnelVision’ Technique Leaks Traffic From Any VPN SystemSecurityWeek

    A new VPN bypass technique allows threat actors to snoop on victims’ traffic by forcing it off the VPN tunnel using built-in features of DHCP.

    newswww.securityweek.comMay 8, 2024, 1:01 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence