IKEv1 Main Mode vulnerable to brute force attacks

Overview

Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks.

Description

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. (CVE-2018-5389)

It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode however, only an online attack against PSK authentication was thought to be feasible.

---

Impact

An attacker may be able to recover a weak Pre-Shared Key.

---

Solution

Use Secure Passwords
Use cryptographically secure PSK values that resist brute force or dictionary attacks.

---

As mentioned in USENIX '18 presentation

> To counter these attacks, both entry points must be closed: Only high entropy PSKs should be used, and both PKE and RPKE modes should be deactivated in all IKE devices. It is not sufficient to configure key sep- aration on the sender side. All receivers must also be informed about this key separation – novel solutions are required to achieve this task.

Acknowledgements

Thanks to Martin Grothe, Joerg Schwenk, and Dennis Felsch for reporting this vulnerability.

This document was written by Trent Novelly.

Vendor Information

857035

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

NETGEAR Not Affected

Notified: 2018-07-18 Updated: 2018-08-17 CVE-2018-5389	Not Affected

Vendor Statement

We have not received a statement from the vendor.

F5 Networks __ Unknown

Updated: 2024-06-24 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

CERT Addendum

F5 had published a security advisory related to this vulnerability, more information can be found here: https://my.f5.com/manage/s/article/K42378447

3com Inc. (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

ACCESS Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Actiontec Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

ADTRAN Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

aep NETWORKS (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

AirWatch Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Alcatel-Lucent Enterprise Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Amazon Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Android Open Source Project Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Appgate Network Security (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Apple Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Arch Linux Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Arista Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

ARRIS Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Aruba Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

ASP Linux (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

ASUSTeK Computer Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

AT&T Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Avaya Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

AVM GmbH Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Belkin Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

BlackBerry Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Blackberry QNX Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

BlueCat Networks Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Broadcom Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Brocade Communication Systems Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Cambium Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Check Point Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Cisco Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Command Software Systems (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

CoreOS Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Debian GNU/Linux Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Dell Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Dell EMC Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

DesktopBSD Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Deutsche Telekom Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Devicescape Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Digi International Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

D-Link Systems Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

dnsmasq Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

DragonFly BSD Project Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

eero Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

EfficientIP Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Espressif Systems Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Extreme Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Fedora Project Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Force10 Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

FreeS/WAN (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

F-Secure Corporation Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Fujitsu Europe Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Geexbox Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Gentoo Linux Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

GNU glibc Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Google Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

HardenedBSD Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Hitachi Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Honeywell Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

HP Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

HTC Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Huawei Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

IBM Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

IBM Corporation (zseries) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

IBM eServer Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Infoblox Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

InfoExpress Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Intel Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Internet Systems Consortium Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Internet Systems Consortium - DHCP Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Interniche Technologies inc. (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Intoto (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Joyent Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Juniper Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

KAME Project Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Lancope Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Lantronix Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Lenovo Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Linksys Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

m0n0wall Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Marvell Semiconductor Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

McAfee Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

MediaTek Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Metaswitch Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Microchip Technology Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Micro Focus Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Microsoft Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

MikroTik Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Miredo Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Mitel Networks Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

NEC Corporation Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

NetBSD Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

NETSCOUT Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

netsnmp Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Nokia Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Nominum Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Novell Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

OmniTI (Inactive) Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

OpenBSD Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

OpenBSD IPsec Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

OpenConnect Ltd Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

OpenDNS Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Openwall GNU/*/Linux Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Oracle Corporation Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Peplink Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

pfSense Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Philips Electronics Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

PowerDNS Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Pulse Secure Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

QLogic Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Quagga Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Qualcomm Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Quantenna Communications Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Red Hat Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Roku Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Ruckus Wireless Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Samsung Mobile Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Secure64 Software Corporation Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Sierra Wireless Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Slackware Linux Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Snort Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Sonos Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Sony Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Sourcefire Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

strongSwan Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

SUSE Linux Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Symantec Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Synology Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

TippingPoint Technologies Inc. Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Toshiba Commerce Solutions Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

TP-LINK Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

TrueOS Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Turbolinux Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Ubiquiti Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Ubuntu Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Unisys Corporation Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Vantiva Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

VMware Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Watchguard Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Wind River Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Zebra Technologies Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

Zyxel Unknown

Notified: 2018-07-18 Updated: 2018-07-18 CVE-2018-5389	Unknown

Vendor Statement

We have not received a statement from the vendor.

View all 142 vendors __View less vendors __

CVSS Metrics

Group	Score	Vector
Base	8.8	AV:N/AC:M/Au:N/C:C/I:C/A:N
Temporal	7.9	E:POC/RL:U/RC:–
Environmental	7.9	CDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

References

• <https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.html&gt;
• <https://www.usenix.org/conference/usenixsecurity18/presentation/felsch&gt;
• <https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key&gt;

Other Information

CVE IDs:	CVE-2018-5389
API URL:	VINCE JSON
Date Public:	2018-08-14 Date First Published: