Описание
In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.
Ссылки
- Broken Link
- Broken Link
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:trendnet:tew-wlc100p_firmware:2.03b03:*:*:*:*:*:*:*
cpe:2.3:h:trendnet:tew-wlc100p:-:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.0006
Низкий
7.3 High
CVSS3
Дефекты
CWE-1188
Связанные уязвимости
CVSS3: 7.3
github
7 месяцев назад
In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK.
EPSS
Процентиль: 19%
0.0006
Низкий
7.3 High
CVSS3
Дефекты
CWE-1188