CVE-2024-7595

GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can be considered similar to CVE-2020-10136.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.7

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://datatracker.ietf.org/doc/html/rfc2784	Technical Description Related
https://www.rfc-editor.org/rfc/rfc6169.html	Technical Description Related
https://www.kb.cert.org/vuls/id/199397

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ietf:generic_routing_encapsulation:-:::::::*
	cpe:2.3:a:ietf:generic_routing_encapsulation6:-:::::::*

History

03 Nov 2025, 21:18

Type	Values Removed	Values Added
References		() https://www.kb.cert.org/vuls/id/199397 -

Information

Published : 2025-02-05 18:15

Updated : 2025-11-03 21:18

NVD link : CVE-2024-7595

Mitre link : CVE-2024-7595

CVE.ORG link : CVE-2024-7595

JSON object : View

Products Affected

ietf

generic_routing_encapsulation
generic_routing_encapsulation6

CWE

NVD-CWE-Other

{"id": "CVE-2024-7595", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 2.2}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2025-02-05T18:15:29.360", "references": [{"url": "https://datatracker.ietf.org/doc/html/rfc2784", "tags": ["Technical Description", "Related"], "source": "[email protected]"}, {"url": "https://www.rfc-editor.org/rfc/rfc6169.html", "tags": ["Technical Description", "Related"], "source": "[email protected]"}, {"url": "https://www.kb.cert.org/vuls/id/199397", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors.\r\n\r\nThis can be considered similar to CVE-2020-10136."}, {"lang": "es", "value": "Los protocolos GRE y GRE6 (RFC2784) no validan ni verifican el origen de un paquete de red, lo que permite que un atacante falsifique y enrute tr\u00e1fico arbitrario a trav\u00e9s de una interfaz de red expuesta, lo que puede provocar suplantaci\u00f3n de identidad, omisi\u00f3n del control de acceso y otros comportamientos de red inesperados. Esto puede considerarse similar a CVE-2020-10136."}], "lastModified": "2025-11-03T21:18:48.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ietf:generic_routing_encapsulation:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B962BEC9-66A8-4A0B-AE6D-9A1A7E34686E"}, {"criteria": "cpe:2.3:a:ietf:generic_routing_encapsulation6:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4726FA71-5F65-4746-B9F9-6205569B019F"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}