| 제목 | TRENDnet TEW-WLC100 TEW-WLC100 2.05b02 Misconfiguration |
|---|
| 설명 | **Description:** In the configuration file of `racoon` in the TRENDnet TEW-WLC100 2.05b02, the first item of `exchage_mode` property is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.
**Detail:**
In the `TEW-WLC100 2.05b02` firmware, the partial content of `/etc/racoon.conf` is as follows.
```
remote ::1 [8000]
{
#exchange_mode main,aggressive;
exchange_mode aggressive,main;
doi ipsec_doi;
situation identity_only;
my_identifier user_fqdn "[email protected]";
peers_identifier user_fqdn "[email protected]";
#certificate_type x509 "mycert" "mypriv";
nonce_size 16;
lifetime time 1 min; # sec,min,hour
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group 2;
}
}
```
The official documentation of racoon (https://manpages.ubuntu.com/manpages/trusty/man5/racoon.conf.5.html) states the following requirements.
```
SECURITY CONSIDERATIONS
The use of IKE phase 1 aggressive mode is not recommended, as described in
<http://www.kb.cert.org/vuls/id/886601>.
```
Clearly, there is a misconfiguration vulnerability here. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters. |
|---|
| 원천 | ⚠️ https://app.notion.com/p/TEW-WLC100-2-05b02-38b1f5ba989080f993facb660f17358e?source=copy_link |
|---|
| 사용자 | L14Utopia (UID 99304) |
|---|
| 제출 | 2026. 06. 26. AM 08:24 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 14. PM 08:42 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 390080 [TRENDnet TEW-WLC100 2.05b02 IKE Phase 1 Aggressive Mode /etc/racoon.conf exchange_mode 약한 암호화] |
|---|
| 포인트들 | 20 |
|---|