CVE-2024-7595
Published: 05 February 2025
Summary
CVE-2024-7595 is a medium-severity an unspecified weakness vulnerability in Ietf Generic Routing Encapsulation. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 21.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-48105
Vulnerability details
GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other…
more
unexpected network behaviors. This can be considered similar to CVE-2020-10136.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.