CVE-2018-9129
First published: Wed Aug 15 2018(Updated: )
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zyxel Zywall 110 Firmware | ||
| Zyxel Zywall 110 | ||
| Zyxel Zywall 1100 Firmware | ||
| Zyxel Zywall 1100 | ||
| Zyxel Zywall 310 Firmware | ||
| Zyxel Zywall 310 | ||
| Zyxel Zywall Vpn 50 Firmware | ||
| Zyxel Zywall Vpn 50 | ||
| Zyxel Zywall Vpn 100 Firmware | ||
| Zyxel Zywall Vpn 100 | ||
| Zyxel Zywall Vpn 300 Firmware | ||
| Zyxel Zywall Vpn 300 | ||
| Zyxel Usg 20w Firmware | ||
| Zyxel Usg 20w | ||
| Zyxel Usg 40 Firmware | ||
| Zyxel Usg 40 | ||
| Zyxel Usg 40w Firmware | ||
| Zyxel Usg 40w | ||
| Zyxel Usg 60 Firmware | ||
| Zyxel Usg 60 | ||
| Zyxel Usg 60w Firmware | ||
| Zyxel Usg 60w | ||
| Zyxel Usg 110 Firmware | ||
| Zyxel Usg 110 | ||
| Zyxel Usg 2200-vpn Firmware | ||
| Zyxel Usg 2200-vpn | ||
| Zyxel Usg 310 Firmware | ||
| Zyxel Usg 310 | ||
| Zyxel Usg 1100 Firmware | ||
| Zyxel Usg 1100 | ||
| Zyxel Usg 1900 Firmware | ||
| Zyxel Usg 1900 | ||
| Zyxel Usg 20w-vpn Firmware | ||
| Zyxel Usg 20w-vpn |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-9129?
CVE-2018-9129 is a vulnerability in the Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections in ZyXEL ZyWALL/USG series devices.
Which ZyXEL devices are affected by CVE-2018-9129?
ZyXEL ZyWALL/USG series devices such as Zyxel Zywall 110, Zyxel Zywall 1100, Zyxel Zywall 310, Zyxel Zywall Vpn 50, Zyxel Zywall Vpn 100, Zyxel Zywall Vpn 300, Zyxel Usg 20w, Zyxel Usg 40, Zyxel Usg 40w, Zyxel Usg 60, Zyxel Usg 60w, Zyxel Usg 110, Zyxel Usg 2200-vpn, Zyxel Usg 310, Zyxel Usg 1100, Zyxel Usg 1900, and Zyxel Usg 20w-vpn are affected by CVE-2018-9129.
Are the ZyXEL devices with CVE-2018-9129 vulnerability still vulnerable?
No, the ZyXEL devices mentioned in the previous question have been marked as not vulnerable to CVE-2018-9129.
What is the severity of CVE-2018-9129?
CVE-2018-9129 has a severity rating of 5.9, which is considered medium.
How can I fix the CVE-2018-9129 vulnerability in ZyXEL devices?
To fix the CVE-2018-9129 vulnerability, it is recommended to update the firmware of your ZyXEL ZyWALL/USG series device to the latest version provided by ZyXEL.
- collector/nvd-index
- agent/references
- agent/tags
- agent/event
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/zyxel
- canonical/zyxel zywall 110 firmware
- canonical/zyxel zywall 110
- canonical/zyxel zywall 1100 firmware
- canonical/zyxel zywall 1100
- canonical/zyxel zywall 310 firmware
- canonical/zyxel zywall 310
- canonical/zyxel zywall vpn 50 firmware
- canonical/zyxel zywall vpn 50
- canonical/zyxel zywall vpn 100 firmware
- canonical/zyxel zywall vpn 100
- canonical/zyxel zywall vpn 300 firmware
- canonical/zyxel zywall vpn 300
- canonical/zyxel usg 20w firmware
- canonical/zyxel usg 20w
- canonical/zyxel usg 40 firmware
- canonical/zyxel usg 40
- canonical/zyxel usg 40w firmware
- canonical/zyxel usg 40w
- canonical/zyxel usg 60 firmware
- canonical/zyxel usg 60
- canonical/zyxel usg 60w firmware
- canonical/zyxel usg 60w
- canonical/zyxel usg 110 firmware
- canonical/zyxel usg 110
- canonical/zyxel usg 2200-vpn firmware
- canonical/zyxel usg 2200-vpn
- canonical/zyxel usg 310 firmware
- canonical/zyxel usg 310
- canonical/zyxel usg 1100 firmware
- canonical/zyxel usg 1100
- canonical/zyxel usg 1900 firmware
- canonical/zyxel usg 1900
- canonical/zyxel usg 20w-vpn firmware
- canonical/zyxel usg 20w-vpn