TRENDnet Tew-WLC100P Firmware vulnerabilities

2 CVEs affecting TRENDnet Tew-WLC100P Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-44649, published 2025-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-44647, published 2025-07-21. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1…
CVE-2025-44649, published 2025-07-21. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext,…