TunnelVision - CVE-2024-3661
Fortinet PSIRT Advisories
Fortinet PSIRT Contact:
Website: https://fortiguard.fortinet.com/faq/psirt-contact
FG-IR-24-170
Final
1
1
2024-06-11T00:00:00
Current version
2024-06-11T00:00:00
2025-03-11T00:00:00
Fortinet is aware of the recent publication of the TunnelVision vulnerability (CVE-2024-3661).The research [1] identified a technique to bypass the use of protected VPN tunnels when clients connect via untrusted network, such as rogue Wi-Fi network. This attack may allow an attacker controlled DHCP server on the same network as the targeted user to reroute VPN traffic by setting more specific routes than VPN's on target’s routing table. Note that this technique does not allow decrypting HTTPS traffic but rather allows to redirect the traffic through attacker controlled channels before the traffic is encrypted by the VPN.
None
Improper access control
https://fortiguard.fortinet.com/psirt/FG-IR-24-170
TunnelVision - CVE-2024-3661
TunnelVision by Leviathan Security Group [1] https://www.leviathansecurity.com/blog/tunnelvision
TunnelVision by Leviathan Security Group [1] https://www.leviathansecurity.com/blog/tunnelvision
FortiClientLinux 7.4.0
FortiClientLinux 7.2.5
FortiClientLinux 7.2.4
FortiClientLinux 7.2.3
FortiClientLinux 7.2.2
FortiClientLinux 7.2.1
FortiClientLinux 7.2.0
FortiClientLinux 7.0.13
FortiClientLinux 7.0.12
FortiClientLinux 7.0.11
FortiClientLinux 7.0.10
FortiClientLinux 7.0.9
FortiClientLinux 7.0.8
FortiClientLinux 7.0.7
FortiClientLinux 7.0.6
FortiClientLinux 7.0.5
FortiClientLinux 7.0.4
FortiClientLinux 7.0.3
FortiClientLinux 7.0.2
FortiClientLinux 7.0.1
FortiClientLinux 7.0.0
FortiClientLinux 6.4.9
FortiClientLinux 6.4.8
FortiClientLinux 6.4.7
FortiClientLinux 6.4.4
FortiClientLinux 6.4.3
FortiClientLinux 6.4.2
FortiClientLinux 6.4.1
FortiClientLinux 6.4.0
FortiClientMac 7.4.2
FortiClientMac 7.4.1
FortiClientMac 7.4.0
FortiClientMac 7.2.8
FortiClientMac 7.2.7
FortiClientMac 7.2.6
FortiClientMac 7.2.5
FortiClientMac 7.2.4
FortiClientMac 7.2.3
FortiClientMac 7.2.2
FortiClientMac 7.2.1
FortiClientMac 7.2.0
FortiClientMac 7.0.14
FortiClientMac 7.0.13
FortiClientMac 7.0.12
FortiClientMac 7.0.11
FortiClientMac 7.0.10
FortiClientMac 7.0.9
FortiClientMac 7.0.8
FortiClientMac 7.0.7
FortiClientMac 7.0.6
FortiClientMac 7.0.5
FortiClientMac 7.0.4
FortiClientMac 7.0.3
FortiClientMac 7.0.2
FortiClientMac 7.0.1
FortiClientMac 7.0.0
FortiClientMac 6.4.10
FortiClientMac 6.4.9
FortiClientMac 6.4.8
FortiClientMac 6.4.7
FortiClientMac 6.4.6
FortiClientMac 6.4.5
FortiClientMac 6.4.4
FortiClientMac 6.4.3
FortiClientMac 6.4.2
FortiClientMac 6.4.1
FortiClientMac 6.4.0
FortiClientWindows 7.4.0
FortiClientWindows 7.2.4
FortiClientWindows 7.2.3
FortiClientWindows 7.2.2
FortiClientWindows 7.2.1
FortiClientWindows 7.2.0
FortiClientWindows 7.0.14
FortiClientWindows 7.0.13
FortiClientWindows 7.0.12
FortiClientWindows 7.0.11
FortiClientWindows 7.0.10
FortiClientWindows 7.0.9
FortiClientWindows 7.0.8
FortiClientWindows 7.0.7
FortiClientWindows 7.0.6
FortiClientWindows 7.0.5
FortiClientWindows 7.0.4
FortiClientWindows 7.0.3
FortiClientWindows 7.0.2
FortiClientWindows 7.0.1
FortiClientWindows 7.0.0
FortiClientWindows 6.4.10
FortiClientWindows 6.4.9
FortiClientWindows 6.4.8
FortiClientWindows 6.4.7
FortiClientWindows 6.4.6
FortiClientWindows 6.4.5
FortiClientWindows 6.4.4
FortiClientWindows 6.4.3
FortiClientWindows 6.4.2
FortiClientWindows 6.4.1
FortiClientWindows 6.4.0
TunnelVision - CVE-2024-3661
CVE-2024-3661
FortiClientLinux-7.4.0
FortiClientLinux-7.2.5
FortiClientLinux-7.2.4
FortiClientLinux-7.2.3
FortiClientLinux-7.2.2
FortiClientLinux-7.2.1
FortiClientLinux-7.2.0
FortiClientLinux-7.0.13
FortiClientLinux-7.0.12
FortiClientLinux-7.0.11
FortiClientLinux-7.0.10
FortiClientLinux-7.0.9
FortiClientLinux-7.0.8
FortiClientLinux-7.0.7
FortiClientLinux-7.0.6
FortiClientLinux-7.0.5
FortiClientLinux-7.0.4
FortiClientLinux-7.0.3
FortiClientLinux-7.0.2
FortiClientLinux-7.0.1
FortiClientLinux-7.0.0
FortiClientLinux-6.4.9
FortiClientLinux-6.4.8
FortiClientLinux-6.4.7
FortiClientLinux-6.4.4
FortiClientLinux-6.4.3
FortiClientLinux-6.4.2
FortiClientLinux-6.4.1
FortiClientLinux-6.4.0
FortiClientMac-7.4.2
FortiClientMac-7.4.1
FortiClientMac-7.4.0
FortiClientMac-7.2.8
FortiClientMac-7.2.7
FortiClientMac-7.2.6
FortiClientMac-7.2.5
FortiClientMac-7.2.4
FortiClientMac-7.2.3
FortiClientMac-7.2.2
FortiClientMac-7.2.1
FortiClientMac-7.2.0
FortiClientMac-7.0.14
FortiClientMac-7.0.13
FortiClientMac-7.0.12
FortiClientMac-7.0.11
FortiClientMac-7.0.10
FortiClientMac-7.0.9
FortiClientMac-7.0.8
FortiClientMac-7.0.7
FortiClientMac-7.0.6
FortiClientMac-7.0.5
FortiClientMac-7.0.4
FortiClientMac-7.0.3
FortiClientMac-7.0.2
FortiClientMac-7.0.1
FortiClientMac-7.0.0
FortiClientMac-6.4.10
FortiClientMac-6.4.9
FortiClientMac-6.4.8
FortiClientMac-6.4.7
FortiClientMac-6.4.6
FortiClientMac-6.4.5
FortiClientMac-6.4.4
FortiClientMac-6.4.3
FortiClientMac-6.4.2
FortiClientMac-6.4.1
FortiClientMac-6.4.0
FortiClientWindows-7.4.0
FortiClientWindows-7.2.4
FortiClientWindows-7.2.3
FortiClientWindows-7.2.2
FortiClientWindows-7.2.1
FortiClientWindows-7.2.0
FortiClientWindows-7.0.14
FortiClientWindows-7.0.13
FortiClientWindows-7.0.12
FortiClientWindows-7.0.11
FortiClientWindows-7.0.10
FortiClientWindows-7.0.9
FortiClientWindows-7.0.8
FortiClientWindows-7.0.7
FortiClientWindows-7.0.6
FortiClientWindows-7.0.5
FortiClientWindows-7.0.4
FortiClientWindows-7.0.3
FortiClientWindows-7.0.2
FortiClientWindows-7.0.1
FortiClientWindows-7.0.0
FortiClientWindows-6.4.10
FortiClientWindows-6.4.9
FortiClientWindows-6.4.8
FortiClientWindows-6.4.7
FortiClientWindows-6.4.6
FortiClientWindows-6.4.5
FortiClientWindows-6.4.4
FortiClientWindows-6.4.3
FortiClientWindows-6.4.2
FortiClientWindows-6.4.1
FortiClientWindows-6.4.0
4.7
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:X
https://fortiguard.fortinet.com/psirt/FG-IR-24-170
TunnelVision - CVE-2024-3661
Reference>
TunnelVision by Leviathan Security Group [1] https://www.leviathansecurity.com/blog/tunnelvision
TunnelVision by Leviathan Security Group [1] https://www.leviathansecurity.com/blog/tunnelvision