[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGna28944HLusijWaS0vsDI4UGIim6E-4HGvjceQCEEs":3,"g5a-risk:CVE-2018-5389":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":72,"weaknesses":73,"weaknessesCount":47,"isActivelyExploited":82,"cisaInfo":15,"otxData":15,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":117,"notableEvents":118},"CVE-2018-5389","What is CVE-2018-5389?","The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.","The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of ...","2018-09-06T21:29:00.22","2024-06-24T20:15:09.857",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.03038,[38,38,38,38,38,38,38],"Medium",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"ietf","internet_key_exchange","1.0","cpe:2.3:a:ietf:internet_key_exchange:1.0:*:*:*:*:*:*:*",1,[49,54,58,63,68],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fblogs.cisco.com\u002Fsecurity\u002Fgreat-cipher-but-where-did-you-get-that-key","Cisco",[53],"Third Party Advisory",{"url":55,"source":56,"tags":57},"https:\u002F\u002Fmy.f5.com\u002Fmanage\u002Fs\u002Farticle\u002FK42378447","F5",[],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fweb-in-security.blogspot.com\u002F2018\u002F08\u002Fpractical-dictionary-attack-on-ipsec-ike.html","Blogspot",[62,53],"Exploit",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F857035","Cert",[53,67],"US Government Resource",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.usenix.org\u002Fsystem\u002Ffiles\u002Fconference\u002Fusenixsecurity18\u002Fsec18-felsch.pdf","Usenix",[53],5,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-521","Weak Password Requirements","The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.","Authentication mechanisms often rely on a memorized secret (also known as a password) to provide an assertion of identity for a user of a system. It is therefore important that this password be of sufficient complexity and impractical for an adversary to guess. The specific requirements around how complex a password needs to be depends on the type of system being protected. Selecting the correct password requirements and enforcing them through implementation are critical to the overall success of the authentication mechanism.","Draft","Base","Simple",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2018-5389? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-5389, a medium severity cyber security vulnerability from 2018. The Internet Key Exchange v1 main mode is vulnerable to of...","CVE-2018-5389, CVE-2018-5389 vulnerability, CVE-2018-5389 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, ietf security, internet_key_exchange vulnerability","\u002Fwhat-is\u002Fcve-2018-5389",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-5389","Cybersecurity","CVE-2018-5389, CVE-2018-5389 vulnerability, CVE-2018-5389 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":15,"Negate":15,"Nodes":111},[112],{"Operator":113,"Negate":15,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":116,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D0BC9725-5040-49A7-B08D-C75C53779769",[],[],{"lastModified":11,"cacheTime":120,"version":32},1792350253703,{"score":122,"band":40,"action":123,"scoredAt":124},49,"Plan remediation","2026-10-16T06:44:46.51036+00:00"]