TunnelCrack VPN vulnerabilities

Fortinet is aware of a research article named TunnelCrack, published at Usenix [1], which describe the LocalNet and ServerIP attacks.
These attacks aim to leak VPN client traffic outside of the protected VPN tunnel when clients connect via untrusted networks, such as rogue Wi-Fi access points. 
The LocalNet attack allows an attacker to force the usage of local network access features of the VPN to access unencrypted traffic.
The ServerIP attack allows an attacker to intercept traffic sent to a …

access access points aim article attack attacker attacks aware client clients connect fortinet leak networks points research rogue traffic tunnel tunnelcrack untrusted usenix vpn vulnerabilities wi-fi