CVE-2025-44647

July 22, 2025, 4:15 p.m.

7.3
High

Description

In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.

Product(s) Impacted

Vendor Product Versions
Trendnet
  • Tew-wlc100p
  • 2.03b03

Weaknesses

Common security weaknesses mapped to this vulnerability.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
a trendnet tew-wlc100p 2.03b03 / / / / / / /

References

http://tew-wlc100p.com
https://gist.github.com/TPCchecker/18c32439ed13feaed99f8229d1749892

Tags

cve@mitre.org
2025-07-21
CVE-2025-44647

CVSS Score

7.3 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: NONE
  • Scope: UNCHANGED
  • Confidentiality Impact: LOW
  • Integrity Impact: LOW
  • Availability Impact: LOW

    • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

    View Vector String

Timeline

Published: July 21, 2025, 4:15 p.m.
Last Modified: July 22, 2025, 4:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.