PT-2025-30306 · Trendnet · Trendnet Tew-Wlc100P

Tpcchecker · Published 2025-07-21 · Updated 2025-08-01 · CVE-2025-44649

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-WLC100P version 2.03b03

Description The configuration of racoon within the device sets the exchage mode to aggressive. Utilizing aggressive mode in IKE Phase 1 results in the exposure of identity information in plaintext, making the system susceptible to offline dictionary attacks and limiting the negotiation of security parameters.

Recommendations Modify the configuration file to change the exchage mode setting from aggressive to a more secure option.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-44649

Affected Products

Trendnet Tew-Wlc100P

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-44649 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44649 · Vendor Advisory
• http://tew-wlc100p.com · Note
• https://twitter.com/CVEnew/status/1947339051100434898 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1947407452695085379 · Twitter Post
• https://t.me/cveNotify/130601 · Telegram Post
• https://gist.github.com/TPCchecker/6d787c4916891f493b274b70abfad860 · Note
• https://notion.so/CVE-2025-44649-24754a1113e780a4a1d1c4cd6d3ff345 · Note