31 matches found
Project-CVE-2026-50751
CVE-2026-50751 IKEv1 Security Testing Description This Python script is an offensive security-testing framework designed to target CVE-2026-50751, a Check Point IKEv1 VPN authentication-bypass vulnerability. Features Scans IP addresses for IKEv1 VPN services on UDP port 500 Attempts to identify...
PT-2026-107780
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...
CVE-2026-48131: Heap-based Buffer Overflow
The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service temporary disruption of VPN-related functionality...
EUVD-2002-0598
Malware in sbrugna...
CVE-2002-2117
Microsoft Windows XP allows remote attackers to cause a denial of service CPU consumption by flooding UDP port 500 ISAKMP...
Zyxel IKE Packet Decoder - Unauthenticated Remote Code Execution (Metasploit)
Exploit Title: Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution Date: 2023-03-31 Exploit Author: sf Vendor Homepage: https://www.zyxel.com/ Software Link: https://www.zyxel.com/ Version: ATP Firmware version 4.60 to 5.35 inclusive, USG FLEX Firmware version 4.60 to 5.35 inclusive, V...
MikroTik RouterOS Uncontrolled Resource Consumption (CVE-2017-8338)
A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 used for L2TP over IPsec, preventing the affected router from accepting new connections; all devices will be disconnected from the router a...
Widespread Exploitation of Zyxel Network Devices
Rapid7 is tracking reports of ongoing exploitation of CVE-2023-28771, a critical unauthenticated command injection vulnerability affecting multiple Zyxel networking devices. The vulnerability is present in the default configuration of vulnerable devices and is exploitable in the Wide Area Network...
CVE-2022-23094
A vulnerability was found in libreswan. A malformed packet that is being rejected triggers a logging action that causes a NULL pointer dereference issue, leading to a crash of the pluto daemon. Mitigation If all configured connections are using IKEv2, the IKEv1 subsystem can be disabled by adding...
Design/Logic Flaw
A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 used for L2TP over IPsec, preventing the affected router from accepting new connections; all devices will be disconnected from the router a...
CVE-2017-8338
A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 used for L2TP over IPsec, preventing the affected router from accepting new connections; all devices will be disconnected from the router a...
CVE-2017-8338
CVE-2017-8338 affects MikroTik RouterOS 6.38.5. An unauthenticated remote attacker can exhaust CPU by sending a flood of UDP packets to port 500 (L2TP over IPsec), potentially disconnecting all devices from the router and clearing logs. Documentation from NVD/Tenable/OpenVAS CNVD confirms the DoS...
CVE-2017-8338: Uncontrolled Resource Consumption
A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 used for L2TP over IPsec, preventing the affected router from accepting new connections; all devices will be disconnected from the router a...
PT-2017-18283
Name of the Vulnerable Software and Affected Versions MikroTik version 6.38.5 Description A vulnerability could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500, which is used for L2TP over IPsec. This prevents the affected router from...
Non-ISAKMP Traffic Over Port 500/UDP
Binary data 7212.pasl...
Symantec Dynamic VPN Services: ISAKMP Denial of Service
SUMMARY The NISCC National Infrastructure Security Co-ordination Centre a UK-sponsored inter-departmental agency has identified nearly five-thousand potential ISAKMP vulnerabilities. Test for these vulnerabilities were created by the NISCC and distributed to an unspecified number of vendors...
CVE-2002-2117
Microsoft Windows XP allows remote attackers to cause a denial of service CPU consumption by flooding UDP port 500 ISAKMP...
CVE-2002-2117
Microsoft Windows XP is affected by CVE-2002-2117, where remote attackers can cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP). The Red Hat and NVD entries describe the same impact. No concrete remediation or patch details are provided in the connected documents; PT-2...