| タイトル | TRENDnet TEW-WLC100 TEW-WLC100 2.05b02 Misconfiguration |
|---|
| 説明 | **Description:** In the configuration file of `racoon` in the TRENDnet TEW-WLC100 2.05b02, the first item of `exchage_mode` property is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.
**Detail:**
In the `TEW-WLC100 2.05b02` firmware, the partial content of `/etc/racoon.conf` is as follows.
```
remote ::1 [8000]
{
#exchange_mode main,aggressive;
exchange_mode aggressive,main;
doi ipsec_doi;
situation identity_only;
my_identifier user_fqdn "[email protected]";
peers_identifier user_fqdn "[email protected]";
#certificate_type x509 "mycert" "mypriv";
nonce_size 16;
lifetime time 1 min; # sec,min,hour
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group 2;
}
}
```
The official documentation of racoon (https://manpages.ubuntu.com/manpages/trusty/man5/racoon.conf.5.html) states the following requirements.
```
SECURITY CONSIDERATIONS
The use of IKE phase 1 aggressive mode is not recommended, as described in
<http://www.kb.cert.org/vuls/id/886601>.
```
Clearly, there is a misconfiguration vulnerability here. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters. |
|---|
| ソース | ⚠️ https://app.notion.com/p/TEW-WLC100-2-05b02-38b1f5ba989080f993facb660f17358e?source=copy_link |
|---|
| ユーザー | L14Utopia (UID 99304) |
|---|
| 送信 | 2026年06月26日 08:24 (2 月 ago) |
|---|
| モデレーション | 2026年08月14日 20:42 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 390080 [TRENDnet TEW-WLC100 2.05b02 IKE Phase 1 Aggressive Mode /etc/racoon.conf exchange_mode 弱い暗号化] |
|---|
| ポイント | 20 |
|---|