kea in opnsense and the tunnelvision vulnerability

[DEC670airp414user]

in reading https://kea.readthedocs.io/en/latest/arm/dhcp4-srv.html 

classless-static-route 121 internal false false

does that mean out of box Kea is not vulnerable to the latest vulnerability?

[Patrick M. Hausen]

This is not a vulnerability in any particular piece of DHCP server software. The attack is carried out by placing a rogue DHCP server directly on your LAN infrastructure.