CVE-2025-8763— Ruijie EG306MG strongSwan strongswan.conf missing encryption
Quick assessment
Affected
Ruijie EG306MG
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ruijie EG306MG是中国锐捷（Ruijie）公司的一款路由器。 Ruijie EG306MG 3.0(1)B11P309版本存在安全漏洞，该漏洞源于文件/etc/strongswan.conf中参数i_dont_care_about_security_and_use_aggressive_mode_psk处理不当，可能导致敏感数据未加密。
Possible ATT&CK Techniques 1 AI
T1552.006 · Group Policy Preferences
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-8763
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ruijie EG306MG strongSwan strongswan.conf missing encryption
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in Ruijie EG306MG 3.0(1)B11P309. It has been rated as problematic. This issue affects some unknown processing of the file /etc/strongswan.conf of the component strongSwan. The manipulation of the argument i_dont_care_about_security_and_use_aggressive_mode_psk leads to missing encryption of sensitive data. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据加密缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Ruijie EG306MG 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ruijie EG306MG是中国锐捷（Ruijie）公司的一款路由器。 Ruijie EG306MG 3.0(1)B11P309版本存在安全漏洞，该漏洞源于文件/etc/strongswan.conf中参数i_dont_care_about_security_and_use_aggressive_mode_psk处理不当，可能导致敏感数据未加密。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-8763
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-8763
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Ruijie
-
CVE-2026-92398
Ruijie RG-EW3000GX user_list_note admin os command injection -
CVE-2026-92397
Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os -
CVE-2026-14736
Ruijie RG-UAC user_auth_commit.php unrestricted upload -
CVE-2026-12197
Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup -
CVE-2023-53881
ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution v
Same weakness: CWE-311
-
CVE-2026-92757
Malformed connection string may disable field level encrypti -
CVE-2026-92756
Combining encryption settings may disable encryption -
CVE-2026-81688
openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle v -
CVE-2026-81681
openssl_encrypt before 1.4.9 False Encryption via Cleartext -
CVE-2026-77812
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
V. Comments for CVE-2025-8763
No comments yet