medium5.9
CVE-2018-9129
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN conn…
Impact
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Zywall 110 Firmware | All versions |
| Zyxel | Zywall 1100 Firmware | All versions |
| Zyxel | Zywall 310 Firmware | All versions |
| Zyxel | Zywall Vpn 50 Firmware | All versions |
| Zyxel | Zywall Vpn 100 Firmware | All versions |
| Zyxel | Zywall Vpn 300 Firmware | All versions |
| Zyxel | Usg 20w Firmware | All versions |
| Zyxel | Usg 40 Firmware | All versions |
| Zyxel | Usg 40w Firmware | All versions |
| Zyxel | Usg 60 Firmware | All versions |
| Zyxel | Usg 60w Firmware | All versions |
| Zyxel | Usg 110 Firmware | All versions |
References
- NVD record
- CVE.org record
- https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-on-ipsec-ike.html
- https://www.zyxel.com/support/bleichenbacher_attack_vulnerability.shtml
- https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-on-ipsec-ike.html
- https://www.zyxel.com/support/bleichenbacher_attack_vulnerability.shtml