CVE-2018-5389

low-risk
Published 2018-09-06

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.

Do I need to act?

~
1.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.9/10 Medium
NETWORK / HIGH complexity

Affected Products (1)

Internet Key Exchange

Affected Vendors

Ietf

References (10)

Third Party Advisory https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key
https://my.f5.com/manage/s/article/K42378447
Exploit https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipse...
Third Party Advisory https://www.kb.cert.org/vuls/id/857035
Third Party Advisory https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-felsch.pdf
Third Party Advisory https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key
https://my.f5.com/manage/s/article/K42378447
Exploit https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipse...
Third Party Advisory https://www.kb.cert.org/vuls/id/857035
Third Party Advisory https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-felsch.pdf
26
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 3/34 · Minimal
Exposure 5/34 · Minimal