Cyber Threat

Critical VPN Flaw Lets Hackers Hijack Updates Through Fake Servers

ClickControl

Author

December 05, 2024

Published

Reading

Critical VPN Flaw Lets Hackers Hijack Updates Through Fake Servers

“NachoVPN” Vulnerabilities in Major VPN Clients

Key Points:
– Critical vulnerabilities discovered in Palo Alto GlobalProtect and SonicWall NetExtender VPN clients
– Allows malicious VPN servers to deploy unauthorized updates and execute harmful code

Security Impact:
– Attackers can:
* Steal login credentials
* Execute privileged code
* Install malicious software
* Perform man-in-the-middle attacks
* Install unauthorized root certificates

Vendor Responses:
1. SonicWall:
– Released patch for CVE-2024-29014
– Solution: Update to NetExtender Windows 10.2.341 or higher

2. Palo Alto Networks:
– Released patch for CVE-2024-5921
– Solutions:
* Update to GlobalProtect 6.2.6 or later
* Run VPN client in FIPS-CC mode

Research Development:
– AmberWolf released NachoVPN tool for testing
– Tool features:
* Platform-agnostic design
* Supports multiple VPN clients
* Community-extensible framework
* Compatible with Cisco AnyConnect, SonicWall NetExtender, Palo Alto GlobalProtect, and Ivanti Connect Secure

Organizations are strongly advised to apply the available patches and follow security advisories to protect against these vulnerabilities.

Keywords: VPN vulnerabilities, NachoVPN tool, Palo Alto GlobalProtect, SonicWall NetExtender, VPN security, CVE-2024-29014, CVE-2024-5921, VPN client vulnerabilities, cybersecurity threats, VPN exploits, AmberWolf security, network security, VPN patches, malicious VPN servers, unauthorized updates, code execution vulnerability, man-in-the-middle attacks, root certificate installation, FIPS-CC mode, Cisco AnyConnect, Ivanti Connect Secure, VPN security updates, enterprise VPN security, VPN client patches, security advisories, credential theft protection, privileged code execution, network protection, VPN security testing, VPN vulnerability assessment, corporate VPN security

Share This Article