In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://tew-wlc100p.com | Broken Link |
| https://gist.github.com/TPCchecker/6d787c4916891f493b274b70abfad860 | Broken Link |
| https://www.notion.so/CVE-2025-44649-24754a1113e780a4a1d1c4cd6d3ff345 |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Aug 2025, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:trendnet:tew-wlc100p_firmware:2.03b03:*:*:*:*:*:*:* cpe:2.3:h:trendnet:tew-wlc100p:-:*:*:*:*:*:*:* |
|
| First Time |
Trendnet tew-wlc100p
Trendnet tew-wlc100p Firmware Trendnet |
|
| References | () https://gist.github.com/TPCchecker/6d787c4916891f493b274b70abfad860 - Broken Link | |
| References | () http://tew-wlc100p.com - Broken Link |
21 Jul 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-21 17:15
Updated : 2025-08-07 14:15
NVD link : CVE-2025-44649
Mitre link : CVE-2025-44649
JSON object : View
Products Affected
trendnet
- tew-wlc100p
- tew-wlc100p_firmware
CWE
No CWE.