pentester.land· May 6, 2024· by Lizzie Moratti (@MorattiSec), Dani Cronce🔍 CVE-2024-3661

TunnelVision (CVE-2024-3661): How Attackers Can Decloak Routing-Based VPNs For a Total VPN Leak

Open Original Article ↗
Target Program: -
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Decloaking attack#DHCP#Privacy issue#VPN#CVE-2024-3661