Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-9129

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.

Published

2018-08-15T18:29:01.230

Last Modified

2024-11-21T04:15:01.633

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System zyxel zywall_110_firmware - Yes
Hardware zyxel zywall_110 - No
Operating System zyxel zywall_1100_firmware - Yes
Hardware zyxel zywall_1100 - No
Operating System zyxel zywall_310_firmware - Yes
Hardware zyxel zywall_310 - No
Operating System zyxel zywall_vpn_50_firmware - Yes
Hardware zyxel zywall_vpn_50 - No
Operating System zyxel zywall_vpn_100_firmware - Yes
Hardware zyxel zywall_vpn_100 - No
Operating System zyxel zywall_vpn_300_firmware - Yes
Hardware zyxel zywall_vpn_300 - No
Operating System zyxel usg_20w_firmware - Yes
Hardware zyxel usg_20w - No
Operating System zyxel usg_40_firmware - Yes
Hardware zyxel usg_40 - No
Operating System zyxel usg_40w_firmware - Yes
Hardware zyxel usg_40w - No
Operating System zyxel usg_60_firmware - Yes
Hardware zyxel usg_60 - No
Operating System zyxel usg_60w_firmware - Yes
Hardware zyxel usg_60w - No
Operating System zyxel usg_110_firmware - Yes
Hardware zyxel usg_110 - No
Operating System zyxel usg_2200-vpn_firmware - Yes
Hardware zyxel usg_2200-vpn - No
Operating System zyxel usg_310_firmware - Yes
Hardware zyxel usg_310 - No
Operating System zyxel usg_1100_firmware - Yes
Hardware zyxel usg_1100 - No
Operating System zyxel usg_1900_firmware - Yes
Hardware zyxel usg_1900 - No
Operating System zyxel usg_20w-vpn_firmware - Yes
Hardware zyxel usg_20w-vpn - No
References