In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://tew-wlc100p.com | Broken Link |
| https://gist.github.com/TPCchecker/18c32439ed13feaed99f8229d1749892 | Broken Link |
| https://www.notion.so/CVE-2025-44647-24754a1113e780b0a130d4439861bf3c | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Aug 2025, 17:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Trendnet tew-wlc100p
Trendnet tew-wlc100p Firmware Trendnet |
|
| CWE | CWE-1188 | |
| CPE | cpe:2.3:o:trendnet:tew-wlc100p_firmware:2.03b03:*:*:*:*:*:*:* cpe:2.3:h:trendnet:tew-wlc100p:-:*:*:*:*:*:*:* |
|
| References | () https://www.notion.so/CVE-2025-44647-24754a1113e780b0a130d4439861bf3c - Third Party Advisory | |
| References | () http://tew-wlc100p.com - Broken Link | |
| References | () https://gist.github.com/TPCchecker/18c32439ed13feaed99f8229d1749892 - Broken Link |
07 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Jul 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-21 16:15
Updated : 2025-08-07 17:55
NVD link : CVE-2025-44647
Mitre link : CVE-2025-44647
JSON object : View
Products Affected
trendnet
- tew-wlc100p
- tew-wlc100p_firmware
CWE
CWE-1188
Insecure Default Initialization of Resource