CVE-2025-44649
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.
Risk Assessment
The organization is at risk of credential interception and offline dictionary attacks, potentially leading to unauthorized VPN access and further infrastructure compromise.
Recommendation
It is recommended to change the exchage_mode setting from aggressive to main in the racoon configuration and update the TRENDnet TEW-WLC100P firmware to the latest available version.
Other vulnerabilities in TRENDnet TEW-WLC100P
See all- CVE-2026-75783Critical
A stack-based buffer overflow vulnerability has been detected in the DHCP blobmsg Handler of the /sbin/netifd file in TRENDnet TEW-WLC100P version 12.07b01. The attack must be carried out from within the local network.
- CVE-2025-44647High
In TRENDnet TEW-WLC100P version 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file. This allows IKE Responders to use IKEv1 Aggressive Mode with Pre-Shared Keys, enabling offline attacks on the openly transmitted PSK hash.
Original NVD description (English source)
In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.