CVE-2018-5389 describes a vulnerability in the Internet Key Exchange v1 (IKEv1) main mode, specifically affecting implementations of IETF Internet Key Exchange. This flaw allows for offline dictionary or brute-force attacks against Pre-Shared Keys (PSKs), which was previously thought only possible in aggressive mode. A successful attack could enable an attacker to recover weak PSKs or impersonate a victim host or network. The vulnerability is rated Medium severity (CVSS 5.9), indicating it can be exploited remotely over the network with high attack complexity, leading to high confidentiality impact without affecting integrity or availability. While the EPSS score is low, suggesting a low probability of exploitation, the potential for unauthorized access is significant. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion or media coverage, suggesting it is not a widely publicized or actively targeted threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:ietf:internet_key_exchange:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.