CVE-2024-7595: IETF RFC2784 – Generic Routing Encapsulation (GRE) · Authentication Bypass by Spoofing
Affects IETF RFC2784 – Generic Routing Encapsulation (GRE)Source CVE Database V5
Mentioned vulnerabilities
Not known to be exploited · CVSS 5.3 Medium.
Data as of 26 Oct 2026, 08:30 UTC
- EPSS
- 1.6% chance of exploitation in 30 days – higher than 75% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitation evidence
Disclosed: evidence found.
CVE published 5 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Since no official patches are currently available for this vulnerability, European organizations should implement network-level mitigations to reduce exposure. These include: 1) Deploying strict ingress and egress filtering on network interfaces to block spoofed GRE packets from untrusted sources, leveraging source address validation techniques such as uRPF (Unicast Reverse Path Forwarding). 2) Restricting GRE traffic to known and trusted endpoints only, using firewall rules or access control lists (ACLs) to limit GRE packet acceptance. 3) Monitoring GRE traffic patterns for anomalies that could indicate spoofing or unauthorized routing attempts. 4) Employing network segmentation to isolate GRE tunnels and reduce the blast radius of potential exploitation. 5) Using GRE implementations that support additional authentication or integrity checks, such as GRE with IPsec, to provide cryptographic validation of GRE packets. 6) Keeping network device firmware and software up to date to incorporate any future patches or mitigations released by vendors. 7) Conducting regular network security assessments and penetration testing focused on GRE tunnels and routing configurations. These targeted measures go beyond generic advice by focusing on GRE-specific controls and network architecture adjustments.
Description
GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can be considered similar to CVE-2020-10136.