| Titolo | Ruijie Networks EG306MG EG_3.0(1)B11P309 Misconfiguration |
|---|
| Descrizione | In Ruijie Networks EG306MG EG_3.0(1)B11P309 PoE Gateway, the i_dont_care_about_security_and_use_aggressive_mode_psk property is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK. |
|---|
| Fonte | ⚠️ https://www.notion.so/23e54a1113e78049aba1f9f586c67764 |
|---|
| Utente | TPCHECKER (UID 88463) |
|---|
| Sottomissione | 28/07/2025 20:11 (1 Anno fa) |
|---|
| Moderazione | 08/08/2025 17:42 (11 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 319265 [Ruijie EG306MG 3.0(1)B11P309 strongSwan /etc/strongswan.conf cifratura debole] |
|---|
| Punti | 16 |
|---|