Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwhc-w7rm-vh46

Опубликовано: 21 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.

In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.

EPSS

Процентиль: 5%
0.00021
Низкий

7.5 High

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 7.5
nvd
7 месяцев назад

In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.

EPSS

Процентиль: 5%
0.00021
Низкий

7.5 High

CVSS3

Дефекты

CWE-312