Vulnerability Description
The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackers to decrypt RSA-encrypted nonces by leveraging a Bleichenbacher attack.
CVSS Score
5.9
MEDIUM
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Clavister | Cos Core | < 11.00.11 |
References
- https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-onThird Party Advisory
- https://www.clavister.com/advisories/security/clav-sa-0157-bleichenbacher-oracleVendor Advisory
- https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-onThird Party Advisory
- https://www.clavister.com/advisories/security/clav-sa-0157-bleichenbacher-oracleVendor Advisory
FAQ
What is CVE-2018-8753?
CVE-2018-8753 is a vulnerability with a CVSS score of 5.9 (MEDIUM). The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackers to decrypt RSA-encrypted nonces by leveraging a Bleichenb...
How severe is CVE-2018-8753?
CVE-2018-8753 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-8753?
Check the references section above for vendor advisories and patch information. Affected products include: Clavister Cos Core.