Serious Crypto problem with VPN Tunnels

Britain’s national emergency response team, the National Infrastructure
Security Coordination Centre, issued a warning this week about the
safety of virtual private networks that use IPsec encryption and
tunneling to connect remote workers to corporate networks. The flaw,
which the NISCC rates as "high" risk, makes it possible for an attacker
to intercept IP packets traveling between two IPsec devices. more