Search
Find a vulnerability
Search criteria
2 vulnerabilities found for TEW-WLC100 by TRENDnet
CVE-2026-19891 (GCVE-0-2026-19891)
Vulnerability from nvd – Published: 2026-08-15 11:00 – Updated: 2026-08-15 11:00
VLAI
EPSS
VEX
Title
TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption
Summary
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchange_mode causes missing encryption of sensitive data. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/390080 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/390080/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-19891 | third-party-advisory |
| https://vuldb.com/submit/870587 | third-party-advisory |
| https://app.notion.com/p/TEW-WLC100-2-05b02-38b1f… | related |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TRENDnet | TEW-WLC100 |
Affected:
2.05b02
cpe:2.3:a:trendnet:tew-wlc100:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:trendnet:tew-wlc100:*:*:*:*:*:*:*:*"
],
"modules": [
"IKE Phase 1 Aggressive Mode"
],
"product": "TEW-WLC100",
"vendor": "TRENDnet",
"versions": [
{
"status": "affected",
"version": "2.05b02"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "L14Utopia (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchange_mode causes missing encryption of sensitive data. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:ND/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-311",
"description": "Missing Encryption of Sensitive Data",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-310",
"description": "Cryptographic Issues",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-15T11:00:08.719Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-390080 | TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/390080"
},
{
"name": "VDB-390080 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/390080/cti"
},
{
"name": "CVE-2026-19891 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-19891"
},
{
"name": "Submit #870587 | TRENDnet TEW-WLC100 TEW-WLC100 2.05b02 Misconfiguration",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/870587"
},
{
"tags": [
"related"
],
"url": "https://app.notion.com/p/TEW-WLC100-2-05b02-38b1f5ba989080f993facb660f17358e?source=copy_link"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-14T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-14T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-14T20:47:04.000Z",
"value": "VulDB entry last update"
}
],
"title": "TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-19891",
"datePublished": "2026-08-15T11:00:08.719Z",
"dateReserved": "2026-08-14T18:41:58.487Z",
"dateUpdated": "2026-08-15T11:00:08.719Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-19891 (GCVE-0-2026-19891)
Vulnerability from cvelistv5 – Published: 2026-08-15 11:00 – Updated: 2026-08-15 11:00
VLAI
EPSS
VEX
Title
TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption
Summary
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchange_mode causes missing encryption of sensitive data. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/390080 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/390080/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-19891 | third-party-advisory |
| https://vuldb.com/submit/870587 | third-party-advisory |
| https://app.notion.com/p/TEW-WLC100-2-05b02-38b1f… | related |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TRENDnet | TEW-WLC100 |
Affected:
2.05b02
cpe:2.3:a:trendnet:tew-wlc100:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:trendnet:tew-wlc100:*:*:*:*:*:*:*:*"
],
"modules": [
"IKE Phase 1 Aggressive Mode"
],
"product": "TEW-WLC100",
"vendor": "TRENDnet",
"versions": [
{
"status": "affected",
"version": "2.05b02"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "L14Utopia (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchange_mode causes missing encryption of sensitive data. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:ND/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-311",
"description": "Missing Encryption of Sensitive Data",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-310",
"description": "Cryptographic Issues",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-15T11:00:08.719Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-390080 | TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/390080"
},
{
"name": "VDB-390080 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/390080/cti"
},
{
"name": "CVE-2026-19891 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-19891"
},
{
"name": "Submit #870587 | TRENDnet TEW-WLC100 TEW-WLC100 2.05b02 Misconfiguration",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/870587"
},
{
"tags": [
"related"
],
"url": "https://app.notion.com/p/TEW-WLC100-2-05b02-38b1f5ba989080f993facb660f17358e?source=copy_link"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-14T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-14T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-14T20:47:04.000Z",
"value": "VulDB entry last update"
}
],
"title": "TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-19891",
"datePublished": "2026-08-15T11:00:08.719Z",
"dateReserved": "2026-08-14T18:41:58.487Z",
"dateUpdated": "2026-08-15T11:00:08.719Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}