CVE-2018-8753
Medium
Description
The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackers to decrypt RSA-encrypted nonces by leveraging a Bleichenbacher attack.
SeverityMedium
CVSS5.9
Exploit probability—
ProductClavister Cos Core
PublishedAug 15, 2018
First seenAug 15, 2018
How to fix
Update
- clavister cos_core11.00.11, 11.20.06, 12.00.09 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clavister cos_core | v < 11.00.11, 11.20.00 ≤ v < 11.20.06, 12.00.00 ≤ v < 12.00.09 | 11.00.11, 11.20.06, 12.00.09 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.