Approved changes feed: RSS · Atom

cpe:2.3:o:trendnet:tew-wlc100p_firmware:2.03b03:*:*:*:*:*:*:*

part: o version: 2.03b03 update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTew Wlc100P Firmware (279cbc35-83d3-5b8e-af27-8fa3307d2409)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-44649 vulnerable 2026-06-08 07:25:10.695671 Details available
In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.
Published: 2025-07-21T00:00:00.000Z
Updated: 2026-07-29T14:46:22.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44647 vulnerable 2026-06-08 07:25:10.693995 Details available
In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.
Published: 2025-07-21T00:00:00.000Z
Updated: 2026-07-05T01:06:44.900Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.