fast_ipsec implementation doesn't increment packet sequence number, allowing replay attack for captured packet.
vulners.com/securityvulns/securityvulns:doc:11902