IKEv1 Aggressive Mode Vulnerability in TRENDnet Wireless Controller
CVE-2025-44647
7.3HIGH
What is CVE-2025-44647?
The TRENDnet TEW-WLC100P version 2.03b03 contains a vulnerability where the option allowing IKE Responders to utilize IKEv1 Aggressive Mode with Pre-Shared Keys (PSK) is activated. This configuration flaw exposes the system to potential offline attacks, enabling malicious actors to exploit the non-secure transmission of PSK hashes, thereby compromising the integrity of the wireless communication.
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved