IKE Phase 1 Vulnerability in TRENDnet TEW-WLC100P Configuration

CVE-2025-44649

What is CVE-2025-44649?

The TRENDnet TEW-WLC100P suffers from a configuration vulnerability due to the use of aggressive mode in IKE Phase 1 within its racoon configuration file. This setting exposes identity information in plaintext, increasing the risk of offline dictionary attacks. Additionally, the aggressive mode reduces flexibility in negotiating security parameters, thereby making it easier for attackers to compromise the device's security. Users are encouraged to review their configurations and consider switching to a more secure mode to safeguard against potential attacks.

References