CVE-2018-8753

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.63%

Published

Aug 15, 2018

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackers to decrypt RSA-encrypted nonces by leveraging a Bleichenbacher attack.

Affected Products (3)

clavister · cos_core (up to 11.00.11)vulnerable

clavister · cos_core (up to 11.20.06)vulnerable

clavister · cos_core (up to 12.00.09)vulnerable

References (4)

https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-on-ipsec-ike.html

Third Party Advisory

https://www.clavister.com/advisories/security/clav-sa-0157-bleichenbacher-oracle-vulnerability-in-ikev1

Vendor Advisory

https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-on-ipsec-ike.html

Third Party Advisory

https://www.clavister.com/advisories/security/clav-sa-0157-bleichenbacher-oracle-vulnerability-in-ikev1

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs