CVE-2025-44647

7.3 highEPSS 0.3%

High (7.3) in trendnet tew-wlc100p firmware. EPSS 0.3% chance of exploitation in the next 30 days.

In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-1188
Published: 2025-07-21
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

trendnet:tew-wlc100p_firmware

References

https://gist.github.com/TPCchecker/18c32439ed13feaed99f8229d1749892
https://www.notion.so/CVE-2025-44647-24754a1113e780b0a130d4439861bf3c

Check your stack JSON