CVE-2025-44649 describes a vulnerability in the TRENDnet TEW-WLC100P version 2.03b03 where the racoon VPN configuration file sets the first item of exchange_mode to aggressive. Aggressive mode in IKE Phase 1 leaks identity information in plaintext, enabling offline dictionary attacks against authentication credentials and reducing the ability to negotiate secure parameters. This weakness corresponds to CWE-312 (Cleartext Storage of Sensitive Information). The CVSS v3.1 base score is 7.5 (High), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact on confidentiality only.

The vulnerability exposes identity information during IKE Phase 1 negotiation in plaintext, allowing attackers to perform offline dictionary attacks to potentially recover authentication credentials. This compromises confidentiality of the VPN authentication process. There is no impact on integrity or availability reported. No known exploits are currently documented in the wild.

No official patch or vendor advisory is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. As a mitigation, avoid using aggressive mode in IKE Phase 1 configurations and prefer main mode, which does not expose identity information. Network administrators should review and update VPN configurations accordingly once vendor guidance or patches become available.