CVE-2025-44647

Katalog CVE

CVSS 7.3 · High EPSS 0,31%

Kerentanan Initialization of a Resource with an Insecure Default pada trendnet tew-wlc100p firmware. Skor CVSS 3.1 7.3 (High) menurut CISA ADP.

Deskripsi (NVD)

In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.

Rincian

Terbit di NVD

21 Juli 2025

Terakhir diubah

5 Juli 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1188: Initialization of a Resource with an Insecure Default

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.notion.so/CVE-2025-44647-24754a1113e780b0a130d4439861bf3c advisory pihak ketiga
• https://gist.github.com/TPCchecker/18c32439ed13feaed99f8229d1749892 broken link