TunnelCrack Vulnerability

[mijovay910]

Do gl.inet routers protect against the TunnelCrack vulnerability affecting VPNs?

Here is a description of the vulnerability:

TunnelCrack vulnerabilities in VPN clients

(" Aug 10, 2023 The recently discovered TunnelCrack vulnerabilities can be used to disrupt normal operation of VPNs and partially deprive users of protection. The problem affects most corporate and home user VPNs.")

Have any users tested to see if the gl.inet firmware has this vulnerability?

[hansome]

Please refer to:

Does the TunnelCrack VPN Vulnerability Impact GL.iNET firmware?

That vulnerability doesn’t impact GL.iNET firmware(4.4.6 and onwards). As xize11 says, we have lan-wan traffic blocked if the VPN client is on. I will add: that’s true even when “Block Non-VPN Traffic” global option is off. I checked the vulnerability details and do some tests, and I conclude that the router provides an extra layer for such an attack. Let me explain: LocalNet attack: - immunited by all GL.iNET firmware. For Windows, after enabling wireguard client locally, we have rou…