TRENDnet TEW-WLC100P Racoon IKE Phase 1 Misconfiguration Vulnerability

A misconfiguration vulnerability has been identified in the TRENDnet TEW-WLC100P router running firmware version 2.03b03. The issue arises in the racoon configuration file, where the exchange_mode is set to aggressive. This setting in IKE Phase 1 exposes identity information in plaintext, making it susceptible to offline dictionary attacks, and reduces flexibility in negotiating security parameters.

Impact

The vulnerability exposes identity information in plaintext, creating a risk of offline dictionary attacks, and limits the ability to negotiate security parameters effectively.