CVE-2021-45079
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticat
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.
CRITICAL · CVSS 9.1
EPSS 0.00121
Schedule remediation
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0