CVE-2018-9129: Medium severity zyxel zywall 1100 firmware vulnerability
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-9129?
CVE-2018-9129 is a vulnerability in the Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections in ZyXEL ZyWALL/USG series devices.
Which ZyXEL devices are affected by CVE-2018-9129?
ZyXEL ZyWALL/USG series devices such as Zyxel Zywall 110, Zyxel Zywall 1100, Zyxel Zywall 310, Zyxel Zywall Vpn 50, Zyxel Zywall Vpn 100, Zyxel Zywall Vpn 300, Zyxel Usg 20w, Zyxel Usg 40, Zyxel Usg 40w, Zyxel Usg 60, Zyxel Usg 60w, Zyxel Usg 110, Zyxel Usg 2200-vpn, Zyxel Usg 310, Zyxel Usg 1100, Zyxel Usg 1900, and Zyxel Usg 20w-vpn are affected by CVE-2018-9129.
Are the ZyXEL devices with CVE-2018-9129 vulnerability still vulnerable?
No, the ZyXEL devices mentioned in the previous question have been marked as not vulnerable to CVE-2018-9129.
What is the severity of CVE-2018-9129?
CVE-2018-9129 has a severity rating of 5.9, which is considered medium.
How can I fix the CVE-2018-9129 vulnerability in ZyXEL devices?
To fix the CVE-2018-9129 vulnerability, it is recommended to update the firmware of your ZyXEL ZyWALL/USG series device to the latest version provided by ZyXEL.