CVE-2018-5389

{"id": "CVE-2018-5389", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2018-09-06T21:29:00.220", "references": [{"url": "https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key", "tags": ["Third Party Advisory"], "source": "cret@cert.org"}, {"url": "https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cret@cert.org"}, {"url": "https://www.kb.cert.org/vuls/id/857035", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}, {"url": "https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-felsch.pdf", "tags": ["Third Party Advisory"], "source": "cret@cert.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-521"}]}, {"type": "Secondary", "source": "cret@cert.org", "description": [{"lang": "en", "value": "CWE-323"}]}], "descriptions": [{"lang": "en", "value": "The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network."}, {"lang": "es", "value": "El modo principal de Internet Key Exchange v1 es vulnerable a ataques de diccionario offline o de fuerza bruta. La reutilizaci\u00f3n de un par de claves en diferentes versiones y modos de IKE podr\u00eda conducir a omisiones de autenticaci\u00f3n en protocolos cruzados. Se sabe que el modo agresivo de IKEv1 PSK es vulnerable a ataques de diccionario offline o de fuerza bruta. Sin embargo, para el modo principal, se pensaba que solo ser\u00eda posible un ataque online contra la autenticaci\u00f3n PSK. Esta vulnerabilidad podr\u00eda permitir que un atacante recupere una PSK (Pre-Shared Key) d\u00e9bil o que suplante a un host o red v\u00edctimas."}], "lastModified": "2019-10-09T23:41:16.953", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ietf:internet_key_exchange:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0BC9725-5040-49A7-B08D-C75C53779769"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}