Tew-wlc100p Firmware vulnerabilities
2 known vulnerabilities in Tew-wlc100p Firmware from TRENDnet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score
Latest first
- 7.5 High severity
Tew-wlc100p Firmware: Cleartext Storage of Sensitive Information
In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexi
- 7.3 High severity
Tew-wlc100p Firmware: Initialization of a Resource with an Insecure Default
In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks