CVE-2018-5389:
First published: Thu Sep 06 2018(Updated: )
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.
Credit: cret@cert.org cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Key Exchange | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key
- https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.html
- https://www.kb.cert.org/vuls/id/857035
- https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-felsch.pdf
- https://my.f5.com/manage/s/article/K42378447
Frequently Asked Questions
What is CVE-2018-5389?
CVE-2018-5389 is a vulnerability in the Internet Key Exchange v1 main mode that allows offline dictionary or brute force attacks.
What is the severity of CVE-2018-5389?
The severity of CVE-2018-5389 is medium, with a severity value of 5.9.
How does CVE-2018-5389 affect software?
CVE-2018-5389 affects software that implements Internet Key Exchange v1 with a version of 1.0.
How can I fix CVE-2018-5389?
To fix CVE-2018-5389, it is recommended to update the software to a version that is not vulnerable or apply patches provided by the vendor.
Where can I find more information about CVE-2018-5389?
More information about CVE-2018-5389 can be found at the following references: [link 1], [link 2], [link 3].
- agent/weakness
- agent/type
- agent/title
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/author
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- vendor/ietf
- canonical/internet key exchange
- version/internet key exchange/1.0