CVE-2024-7595

Katalog CVE

CVSS 6.5 · Medium EPSS 1,6%

Kerentanan pada ietf generic routing encapsulation, ietf generic routing encapsulation6. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can be considered similar to CVE-2020-10136.

Rincian

Terbit di NVD

5 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L · uraikan di kalkulator

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://datatracker.ietf.org/doc/html/rfc2784 deskripsi teknis · related
• https://www.rfc-editor.org/rfc/rfc6169.html deskripsi teknis · related
• https://www.kb.cert.org/vuls/id/199397