I came across this article and im wondering if anyone knows wether RouterOS is affected by this or not? Atleast Cisco and Zyxel has patched theirs already.
https://threatpost.com/researchers-brea ... aw/135070/
Re: Is RouterOS affected by this new IPSec vulnerability?
The source of these is this document:
https://www.ei.rub.de/media/nds/veroeff ... felsch.pdf
It outlines 5 problems with the IPsec IKE itself.
Four of these RouterOS is not affected, the last one, involving dictionary attacks, we have added a Warning in RouterOS, that is shown when you use the particular authentication method, that you must use a hard to brute-force PSK.
https://www.ei.rub.de/media/nds/veroeff ... felsch.pdf
It outlines 5 problems with the IPsec IKE itself.
Four of these RouterOS is not affected, the last one, involving dictionary attacks, we have added a Warning in RouterOS, that is shown when you use the particular authentication method, that you must use a hard to brute-force PSK.