CVE-2018-5389

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.

• CWE-521

• https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-keyThird Party Advisory
• https://my.f5.com/manage/s/article/K42378447
• https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.htmlExploit, Third Party Advisory
• https://www.kb.cert.org/vuls/id/857035Third Party Advisory, US Government Resource
• https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-felsch.pdfThird Party Advisory
• https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-keyThird Party Advisory
• https://my.f5.com/manage/s/article/K42378447
• https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.htmlExploit, Third Party Advisory
• https://www.kb.cert.org/vuls/id/857035Third Party Advisory, US Government Resource
• https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-felsch.pdfThird Party Advisory

Published

Sep 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5383Bluetooth firmware or operating system software drivers in m…6.8
• CVE-2018-5384Navarino Infinity web interface up to version 2.2 exposes an…
• CVE-2018-5385Navarino Infinity is prone to session fixation attacks. The …
• CVE-2018-5386Some Navarino Infinity functions, up to version 2.2, placed …
• CVE-2018-5387Wizkunde SAMLBase may incorrectly utilize the results of XML…7.5
• CVE-2018-5388In stroke_socket.c in strongSwan before 5.6.3, a missing pac…
• CVE-2018-5390Linux kernel versions 4.9+ can be forced to make very expens…7.5
• CVE-2018-5391The Linux kernel, versions 3.9+, is vulnerable to a denial o…7.5
• CVE-2018-5392mingw-w64 version 5.0.4 by default produces executables that…
• CVE-2018-5393The TP-LINK EAP Controller is TP-LINK's software for remotel…
• CVE-2018-5399The Auto-Maskin DCU 210E firmware contains an undocumented D…9.4
• CVE-2018-5400The Auto-Maskin products utilize an undocumented custom prot…9.1