Unveiling The TunnelCrack VPN Vulnerabilities

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

The Tunnelcrack vulnerabilities are a set of four vulnerabilities that affect most VPN products. The vulnerabilities affect the way that VPNs handle certain ciphers, which are algorithms used to encrypt traffic. By exploiting these vulnerabilities, attackers can force the VPN to send traffic outside of the encrypted tunnel, where it can be read by the attacker. Upgrading VPN products as soon as possible is crucial to prevent the exposure of sensitive information to attackers.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.