YardenFadida/CVE-2024-3661_Demo

PoC

Demo TunnelVision vulnerability for VPN using DHCP option 121

view exploit source poc_in_githubauthor YardenFadidapublished 2025-11-27catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-3661UShigh7.6OT elevatedExploit
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to l…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan