CME-204
IPsec / WireGuard (Encrypted Transport)
Description
Encrypts all network traffic between hosts using IPsec or WireGuard, preventing eavesdropping, injection, and man-in-the-middle attacks on the wire.
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Attack Complexity (AC) | L → H | Network-level MitM requires breaking cryptographic tunnel |
| Confidentiality (C) | H → L | Encrypted transit prevents passive eavesdropping |
CWE Relationships
Verification
Verify IPsec or WireGuard tunnels are established
$ ipsec status 2>/dev/null || wg show 2>/dev/null
# Expected: established|interface
# Expected: established|interface
Platform: linux