DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16411 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security Fix(es):

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security Fix(es):

    * DHCP: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1 advisory.

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21131)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21138)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3 advisory.

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

  - Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information     disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache     Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34,     from 9.0.0.M1 through 9.0.98. The following versions were EOL at the time the CVE was created but are     known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. If all of the     following were true, a malicious user was able to view security sensitive files and/or inject content into     those files: - writes enabled for the default servlet (disabled by default) - support for partial PUT     (enabled by default) - a target URL for security sensitive uploads that was a sub-directory of a target     URL for public uploads - attacker knowledge of the names of security sensitive files being uploaded - the     security sensitive files also being uploaded via partial PUT If all of the following were true, a     malicious user was able to perform remote code execution: - writes enabled for the default servlet     (disabled by default) - support for partial PUT (enabled by default) - application was using Tomcat's file     based session persistence with the default storage location - application included a library that may be     leveraged in a deserialization attack Users are recommended to upgrade to version 11.0.3, 10.1.35 or     9.0.99, which fixes the issue. (CVE-2025-24813)

  - It is possible to construct a zone such that some queries to it will generate responses containing     numerous records in the Additional section. An attacker sending many such queries can cause either the     authoritative server itself or an independent resolver to use disproportionate resources processing the     queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue     affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and     9.18.11-S1 through 9.18.32-S1. (CVE-2024-11187)

  - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time. (CVE-2024-12085)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441,     8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM     Enterprise Edition:20.3.17 and 21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle     GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle     GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete     access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.
    Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web     service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in     clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run     untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.
    (CVE-2025-21587)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0008 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-3661:
    DHCP can add routes to a clients routing table via the classless static route option (121). VPN-based     security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical     interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic     that was expected to be protected by the VPN.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of HPE Aruba Networking Virtual Intranet Access (VIA) Client running on the remote host is affected by multiple vulnerabilities, as referenced in the hpesbnw04841 advisory. 

  - DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based     security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical     interface. An attacker on the same local network can read, disrupt, or possibly  modify network traffic     that was expected to be protected by the VPN. (CVE-2024-3661)

  - [Windows only] A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could     allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit     could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating     System. This vulnerability does not affect Linux and Android based clients. (CVE-2025-25041)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.10.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.5 advisory.

  - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual     environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as     CVE-2024-9287. (CVE-2024-53899)

  - DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based     security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical     interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic     that was expected to be protected by the VPN. (CVE-2024-3661)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time. (CVE-2024-12085)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.8.1.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.7 advisory.

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21131)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21138)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0377 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security and bug fix(es):

    * Routes in table different to main are not deleted on reapply [rhel-9.5.z] (JIRA:Rocky Linux-73013)
    * Route to VPN server not stored in routing table that is specified by ipv4.route-table [rhel-9.5.z]     (JIRA:Rocky Linux-73166)
    * VPN connections do not support ipv4.routing-rules settings [rhel-9.5.z] (JIRA:Rocky Linux-73167)
    * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic     [rhel-9.5.z] (JIRA:Rocky Linux-64726)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based     security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical     interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic     that was expected to be protected by the VPN. (CVE-2024-3661)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0377 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security and bug fix(es):

      * Routes in table different to main are not deleted on reapply [almalinux-9.5.z] (JIRA:AlmaLinux-73013)
      * Route to VPN server not stored in routing table that is specified by ipv4.route-table     [almalinux-9.5.z] (JIRA:AlmaLinux-73166)
      * VPN connections do not support ipv4.routing-rules settings [almalinux-9.5.z] (JIRA:AlmaLinux-73167)
      * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic     [almalinux-9.5.z] (JIRA:AlmaLinux-64726)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0377 advisory.

    [1.48.10-5.0.1]
    - disable MPTCP handling by default [Orabug: 34801142]
    - add connectivity check via Oracle servers [Orabug: 32051972]

    [1:1.48.10-5]
    - vpn: Support routing rules in vpn conenctions (RHEL-73167)
    - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73166)

    [1:1.48.10-4]
    - Remove routes added by NetworkManager when doing reapply, also those not in main table (RHEL-73013)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0377 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security and bug fix(es):

    * Routes in table different to main are not deleted on reapply [rhel-9.5.z] (JIRA:RHEL-73013)
    * Route to VPN server not stored in routing table that is specified by ipv4.route-table [rhel-9.5.z]     (JIRA:RHEL-73166)
    * VPN connections do not support ipv4.routing-rules settings [rhel-9.5.z] (JIRA:RHEL-73167)
    * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic     [rhel-9.5.z] (JIRA:RHEL-64726)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0288 advisory.

    Security and Bug Fix(es):

    * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)

    * Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:RHEL-73051)

    * VPN connections do not support ipv4.routing-rules settings (JIRA:RHEL-73052)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0288 advisory.

    [1:1.40.16-18.0.1]
    - disable MPTCP handling by default [Orabug: 35081472]
    - Fix ignore-carrier logic [Orabug: 34956744]
    - Disable regeneration of the documentation [Orabug: 34712048]
    - add connectivity check via Oracle servers [Orabug: 32051972]
    - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3
    - Revert 'infiniband: avoid normalizing the p-key when reading from ifcfg'

    [1:1.40.16-18]
    - vpn: fix routing rules support in vpn conenctions (RHEL-73052)
    - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051)

    [1:1.40.16-17]
    - Rebuild to use the right tag

    [1:1.40.16-16]
    - Use /etc/hosts for hostname resolution (RHEL-53200)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0288 advisory.

    Security and Bug Fix(es):

      * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)
      * Route to VPN server not stored in routing table that is specified by ipv4.route-table     (JIRA:AlmaLinux-73051)
      * VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-170 advisory.

  - DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based     security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical     interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic     that was expected to be protected by the VPN. (CVE-2024-3661)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000139553 advisory.

    By design, the DHCP protocol does not authenticate messages, including for example the classless static     route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect     VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected     to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such     attacks.(CVE-2024-3661)

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
265722	RHEL 9 : NetworkManager (RHSA-2025:16411)	Nessus	Red Hat Local Security Checks	low
242588	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1)	Nessus	Misc.	critical
240536	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3)	Nessus	Misc.	low
236090	Alibaba Cloud Linux 3 : 0008: NetworkManager (ALINUX3-SA-2025:0008)	Nessus	Alibaba Cloud Linux Local Security Checks	low
233997	HPE Aruba Networking Virtual Intranet Access (VIA) Client < 4.7.2 Multiple Vulnerabilities (hpesbnw04841)	Nessus	Misc.	high
233564	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.5)	Nessus	Misc.	low
233563	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.7)	Nessus	Misc.	critical
232945	RockyLinux 9 : Security and bug fixes for NetworkManager (Moderate) (RLSA-2025:0377)	Nessus	Rocky Linux Local Security Checks	low
229223	Linux Distros Unpatched Vulnerability : CVE-2024-3661	Nessus	Misc.	low
214375	AlmaLinux 9 : Security and bug fixes for NetworkManager (Medium) (ALSA-2025:0377)	Nessus	Alma Linux Local Security Checks	low
214288	Oracle Linux 9 : and / bug / fixes / for / NetworkManager (ELSA-2025-0377)	Nessus	Oracle Linux Local Security Checks	low
214280	RHEL 9 : Securityes for NetworkManager (Moderate) (RHSA-2025:0377)	Nessus	Red Hat Local Security Checks	low
214070	RHEL 8 : Bug fix of NetworkManager (Moderate) (RHSA-2025:0288)	Nessus	Red Hat Local Security Checks	low
214051	Oracle Linux 8 : NetworkManager (ELSA-2025-0288)	Nessus	Oracle Linux Local Security Checks	low
214010	AlmaLinux 8 : Bug fix of NetworkManager (Medium) (ALSA-2025:0288)	Nessus	Alma Linux Local Security Checks	low
200475	Fortinet FortiClient TunnelVision - CVE-2024-3661 (FG-IR-24-170)	Nessus	Windows	low
200474	Fortinet FortiClient TunnelVision - CVE-2024-3661 (FG-IR-24-170) (macOS)	Nessus	MacOS X Local Security Checks	low
197532	F5 Networks BIG-IP : VPN TunnelVision vulnerability (K000139553)	Nessus	F5 Networks Local Security Checks	high

Detections

Analytics

CVE-2024-3661

low

Tenable Plugins

low

critical

low

low

high

low

critical

low

low

low

low

low

low

low

low

low

low

high