Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Potential for Spoofed Traffic on Exposed Network Interfaces

CVE-2024-7596 · published 1 year ago
Summary

A draft protocol for sending network packets doesn't check where packets come from, allowing hackers to mimic traffic and potentially access a network without permission. This could let attackers bypass security controls and disrupt network operations. Network administrators should review and update their configurations to prevent this type of attack.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ietf generic_udp_encapsulation All versions
cpe:2.3:a:ietf:generic_udp_encapsulation:-:*:*:*:*:*:*:*
Original advisory text
Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network inter...
Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors.

This can be considered similar to CVE-2020-10136.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published5 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-7596 · NVD
Track software like this
Free during beta