CVE-2024-34947

Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack

Critical · published May 20, 2024

CVSS v3.1
9.4
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

🚨 A critical ICMP redirect vulnerability lurking in Quanxun Huiju's IK-Q3000 could reroute your network traffic with just the wrong packet! 🔥 Think of this as a mischievous street sign that suddenly tells drivers to take a different route—one that leads to a dead end or even worse! This vulnerability allows an attacker to mislead your data traffic like a rogue GPS sending you on a wild goose chase. If exploited, an attacker could redirect sensitive data traffic through their own servers, leading to potential data breaches or man-in-the-middle attacks. This means your confidential information could be intercepted or manipulated, creating an absolutely devastating scenario for your network security.

Put simply

Think of this as a mischievous street sign that suddenly tells drivers to take a different route—one that leads to a dead end or even worse! This vulnerability allows an attacker to mislead your data traffic like a rogue GPS sending you on a wild goose chase. The vulnerability arises from the lack of proper validation in ICMP packets, allowing an attacker to send crafted ICMP redirect messages that manipulate the target's routing tables.

What to do

If exploited, an attacker could redirect sensitive data traffic through their own servers, leading to potential data breaches or man-in-the-middle attacks. This means your confidential information could be intercepted or manipulated, creating an absolutely devastating scenario for your network security. To mitigate this risk, update your IK-Q3000 to the latest version, ensure proper filtering of ICMP messages, and conduct a thorough network audit to identify any potential exposure points. Don't wait—act now! You've got this! Follow these steps and tighten up your network security like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00390 · 31.9th percentile
Published
2024-05-20T16:16Z
EPSS history
Timeline
  • 20 MAY 16:16Z
    Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack
    cvelistv5