CVE-2025-44647
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
In TRENDnet TEW-WLC100P version 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file. This allows IKE Responders to use IKEv1 Aggressive Mode with Pre-Shared Keys, enabling offline attacks on the openly transmitted PSK hash.
Risk Assessment
An attacker can capture and crack the pre-shared key (PSK) hash during IKE negotiation, leading to VPN authentication compromise and potential unauthorized network access.
Recommendation
Immediately disable the i_dont_care_about_security_and_use_aggressive_mode_psk option in the strongSwan configuration and update the device firmware to the latest version.
Other vulnerabilities in TRENDnet TEW-WLC100P
See all- CVE-2026-75783Critical
A stack-based buffer overflow vulnerability has been detected in the DHCP blobmsg Handler of the /sbin/netifd file in TRENDnet TEW-WLC100P version 12.07b01. The attack must be carried out from within the local network.
- CVE-2025-44649High
In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.
Original NVD description (English source)
In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.