PT-2025-32450 · Unknown+1 · Strongswan+1

Tpchecker · Published 2025-07-28 · Updated 2025-08-09 · CVE-2025-8763

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Ruijie EG306MG version 3.0(1)B11P309

Description: A vulnerability exists due to missing encryption of sensitive data. The issue is related to the processing of the /etc/strongswan.conf file within the strongSwan component. Manipulation of the i dont care about security and use aggressive mode psk argument is the root cause. The attack can be initiated remotely, but exploitation is difficult and requires a high level of complexity. The vendor was contacted but did not respond.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

CWE-310

Related Identifiers

BDU:2025-09643

CVE-2025-8763

Affected Products

Ruijie Eg306Mg

Strongswan

References · 11

• https://bdu.fstec.ru/vul/2025-09643 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8763 · Security Note
• https://t.me/CVEtracker/29592 · Telegram Post
• https://notion.so/23e54a1113e78049aba1f9f586c67764 · Note
• https://t.me/cveNotify/131561 · Telegram Post
• https://vuldb.com/?submit.624325 · Note
• https://vuldb.com/?ctiid.319265 · Note
• https://ruijiery.com/product/1902613630977839106.html?key=1#f · Note
• https://vuldb.com/?id.319265 · Note
• https://twitter.com/CVEnew/status/1954246633182355728 · Twitter Post
• https://notion.so/Misconfiguration-in-RG-EG-Gateway-23e54a1113e78049aba1f9f586c67764 · Note