Moxa MAR-2000 IPsec route commands allow authenticated injection
Firmware FWR_MAR2000_V1.0_Build_15010909 interpolates a stored VPN address into shell commands run as the model process.
Stories per day · 30 days
2 RSS
Relatedcryptography2post-quantum2command-injection1fragmentation1ikev21industrial-router1kernel1libexpat1mar-20001moxa1ncsc1openbsd1pf1pqc-migration1tls1
9 stories, newest first · one card per story
Stories tagged #ipsec
OpenBSD 8.0 adds firewall hardening and vulnerability fixes
Errata also cover a remotely triggerable IPsec AES-GMAC kernel heap overflow on specific hardware; AES-GCM is unaffected.
Composite IKEv2 key sharing cuts PQC handshake time under packet loss
At 1% packet loss the composite handshake is at least 20% faster than hybrid methods, and 30% faster at 10% loss.
Post-quantum updates to our TLS guidance
NCSC says organizations should deploy post-quantum TLS now, completing high-priority migration by 2031.
Preventing quantum downgrade attacks against IPsec
Cloudflare and the IETF added IPsec downgrade protection after researchers found a design flaw letting quantum attackers decrypt PQ-capable tunnel traffic.
3
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
Researcher Asim Manizada published working exploits for four patched Linux kernel flaws (CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, CVE-2026-74469) enabling local root access.
Linux Kernel Hit by Four Privilege Escalation Flaws Enabling Root Access
Four patched Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—let local attackers corrupt kernel memory and gain root privileges.
ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-50696, a CVSS 8.1 integer underflow in Windows IKEv2 AES-GCM decryption enabling unauthenticated remote code execution on specific IPsec configurations.
What your vendor says about PQC tells you if they are ready
Allot CTO outlines a telecom post-quantum migration playbook: inventory crypto, deploy hybrid ML-KEM on TLS first, and avoid missed interfaces.
5