Researchers Break IPsec VPN Connections with 20-Year-Old Protocol Flaw

🗓️ 14 Aug 2018 16:07:22Reported by Tara SealsType

Researchers find 20-year-old protocol flaw, allowing for Bleichenbacher oracle attack on IKE protocol, compromising IPsec VPN connections

Reporter	Title	Published	Views	Family All 36
ATTACKERKB	CVE-2018-9129	15 Aug 201818:29	–	attackerkb
ATTACKERKB	CVE-2018-0131	14 Aug 201816:29	–	attackerkb
ATTACKERKB	CVE-2018-8753	15 Aug 201818:29	–	attackerkb
BDU FSTEC	The vulnerability of the IKE protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to gain access to protected information.	17 Aug 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the IKE protocol implementation in ZyXEL USG, ZyXEL USG VPN, ZyWALL, and ZyWALL VPN devices allows attackers to gain access to protected information.	17 Aug 201800:00	–	bdu_fstec
Cisco	Cisco IOS and IOS XE Software Internet Key Exchange Version 1 RSA-Encrypted Nonces Vulnerability	13 Aug 201816:00	–	cisco
CNVD	Huawei Firewall Product IPSEC IKEv1 Bleichenbacher Oracle Vulnerability	17 Aug 201800:00	–	cnvd
CNVD	Cisco IOS/IOS XE Software Information Disclosure Vulnerability (CNVD-2018-16176)	20 Aug 201800:00	–	cnvd
CNVD	ZyXEL ZyWALL/USG Series Device Information Disclosure Vulnerability	17 Aug 201800:00	–	cnvd
CVE	CVE-2017-17305	21 Aug 201813:00	–	cve

Source	Link
ei	www.ei.rub.de/media/nds/veroeffentlichungen/2018/08/13/sec18-felsch.pdf
archiv	www.archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180813-rsa-nonce
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en
forums	www.forums.clavister.com/viewtopic.php
zyxel	www.zyxel.com/support/bleichenbacher_attack_vulnerability.shtml

14 Aug 2018 16:07Current

0.4Low risk

Vulners AI Score0.4

EPSS0.01722