What is the CVSS score of CVE-2018-9129?

CVE-2018-9129 has a CVSS 3.0 base score of 5.9 (Medium). CVSS vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 1.0%.

Is there a patch available for CVE-2018-9129?

Yes, a patch is available for CVE-2018-9129. Update the affected software to the latest version immediately.

Zywall 110 Firmware CVE-2018-9129

MEDIUM

2018-08-15 cve@mitre.org

Microsoft Zyxel Information Disclosure Zywall 110 Firmware Zywall 1100 Firmware Zywall 310 Firmware Zywall Vpn 50 Firmware Zywall Vpn 100 Firmware Zywall Vpn 300 Firmware Usg 20W Firmware Usg 40 Firmware Usg 40W Firmware Usg 60 Firmware Usg 60W Firmware Usg 110 Firmware Usg 2200 Vpn Firmware Usg 310 Firmware Usg 1100 Firmware Usg 1900 Firmware Usg 20W Vpn Firmware

5.9

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Aug 15, 2018 - 18:29 nvd

MEDIUM 5.9

DescriptionNVD

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.

AnalysisAI

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Technical ContextAI

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections. Affected products include: Zyxel Zywall 110 Firmware, Zyxel Zywall 1100 Firmware, Zyxel Zywall 310 Firmware, Zyxel Zywall Vpn 50 Firmware, Zyxel Zywall Vpn 100 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.