F5 Networks BIG-IP : VPN TunnelVision vulnerability (K000139553)

high Nessus Plugin ID 197532


The remote device is missing a vendor-supplied security patch.


The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000139553 advisory.

By design, the DHCP protocol does not authenticate messages, including for example the classless static route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such attacks.(CVE-2024-3661)

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.


The vendor has acknowledged the vulnerability, but no solution has been provided.
Refer to the vendor for remediation guidance.

See Also


Plugin Details

Severity: High

ID: 197532

File Name: f5_bigip_SOL000139553.nasl

Version: 1.1

Type: local

Published: 5/21/2024

Updated: 6/17/2024

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information


Risk Factor: High

Score: 7.8


Risk Factor: High

Base Score: 7.3

Temporal Score: 5.7

Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:P/A:P

CVSS Score Source: CVE-2024-3661


Risk Factor: High

Base Score: 7.6

Temporal Score: 6.8

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/h:f5:big-ip, cpe:/a:f5:big-ip_access_policy_manager

Required KB Items: Host/local_checks_enabled, Settings/ParanoidReport, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 5/6/2024

Reference Information

CVE: CVE-2024-3661