New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation

Researchers have detailed a Virtual Private Network (VPN) bypass technique dubbed TunnelVision that allows threat actors to snoop on victim's network traffic by just being on the same local network.
The "decloaking" method has been assigned the CVE identifier CVE-2024-3661 (CVSS score: 7.6). It impacts all operating systems that implement a DHCP client and has

attack bypass cve cve-2024 cvss cvss score dhcp hijacking local local network manipulation network network traffic operating systems private private network researchers score snoop systems threat threat actors traffic tunnelvision tunnelvision attack victim virtual virtual private network vpn