CVE-2025-8763

🗓️ 09 Aug 2025 18:02:05Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 19 Views🌐 WEB

Ruijie EG306MG flaw in strongSwan config at /etc/strongswan.conf; PSK arg causes missing encryption.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the strongSwan microprogramming software firewall solution developed by Ruijie RG-EG306MG-P allows a intruder to disclose protected information.	12 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-8763	9 Aug 202521:51	–	circl
CNNVD	Ruijie EG306MG 安全漏洞	9 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-8763 Ruijie EG306MG strongSwan strongswan.conf missing encryption	9 Aug 202518:02	–	cvelist
EUVD	EUVD-2025-24057	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8763	9 Aug 202518:15	–	nvd
Positive Technologies	PT-2025-32450 · Unknown +1 · Strongswan +1	28 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8763	11 Aug 202518:26	–	redhatcve
Vulnrichment	CVE-2025-8763 Ruijie EG306MG strongSwan strongswan.conf missing encryption	9 Aug 202518:02	–	vulnrichment

[
  {
    "vendor": "Ruijie",
    "product": "EG306MG",
    "versions": [
      {
        "version": "3.0(1)B11P309",
        "status": "affected"
      }
    ],
    "modules": [
      "strongSwan"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
notion	www.notion.so/23e54a1113e78049aba1f9f586c67764

Parameter	Position	Path	Description	CWE
i_dont_care_about_security_and_use_aggressive_mode_psk	path	/etc/strongswan.conf	Configuration manipulation of strongSwan settings leads to missing encryption of sensitive data; vulnerability may be exploitable remotely.	CWE-310, CWE-311

17 Jun 2026 10:07Current

6.9Medium risk

Vulners AI Score6.9

CVSS 22.6

CVSS 3.13.7

CVSS 46.3

CVSS 33.7

EPSS0.00137

SSVC