TunnelVision - CVE-2024-3661

Fortinet is aware of the recent publication of the TunnelVision vulnerability (CVE-2024-3661).The research [1] identified a technique to bypass the use of protected VPN tunnels when clients connect via untrusted network, such as rogue Wi-Fi network. This attack may allow an attacker controlled DHCP server on the same network as the targeted user to reroute VPN traffic by setting more specific routes than VPN's on target’s routing table. Note that this technique does not allow decrypting HTTPS traffic but rather …

attack attacker aware bypass clients connect cve cve-2024 dhcp fortinet may network research rogue server traffic tunnels tunnelvision untrusted vpn vulnerability wi-fi