TunnelVision - decloaking VPNs using DHCP

🗓️ 27 Dec 2024 18:12:47Reported by GitHub Advisory DatabaseType

A technique to bypass VPNs using DHCP option 121 allows traffic redirection to physical interfaces.

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: IBM Technical Suppport Appliance - possible security flaw in DHCP processing that may leak and disrupt network traffic	28 Apr 202522:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202503:41	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0008: NetworkManager (ALINUX3-SA-2025:0008)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : Bug fix of NetworkManager (Medium) (ALSA-2025:0288)	13 Jan 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : Security and bug fixes for NetworkManager (Medium) (ALSA-2025:0377)	18 Jan 202500:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : VPN TunnelVision vulnerability (K000139553)	21 May 202400:00	–	nessus
Tenable Nessus	Fortinet FortiClient TunnelVision - CVE-2024-3661 (FG-IR-24-170)	13 Jun 202400:00	–	nessus
Tenable Nessus	HPE Aruba Networking Virtual Intranet Access (VIA) Client < 4.7.2 Multiple Vulnerabilities (hpesbnw04841)	8 Apr 202500:00	–	nessus
Tenable Nessus	Fortinet FortiClient TunnelVision - CVE-2024-3661 (FG-IR-24-170) (macOS)	13 Jun 202400:00	–	nessus
Tenable Nessus	MiracleLinux 8 : NetworkManager-1.40.16-18.el8_10.ML.1 (AXSA:2025-9552:02)	20 Jan 202600:00	–	nessus

Vulners

Node

quincyRange≤0.13.0rust

Source	Link
github	www.github.com/M0dEx/quincy/security/advisories/GHSA-hqmp-g7ph-x543
leviathansecurity	www.leviathansecurity.com/blog/tunnelvision
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-3661
github	www.github.com/advisories/GHSA-hqmp-g7ph-x543

19 May 2025 20:43Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.6

EPSS0.02912

SSVC