CVE-2021-20152

2021-12-3021:31:05

tenable

www.cve.org

trendnet ac2600 tew-827dru

bittorrent

authentication

web client

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

36.5%

JSON

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/web/

CNA Affected

[
  {
    "product": "Trendnet AC2600 TEW-827DRU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.08B01"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2021-54