CVE-2021-20154

2021-12-3021:31:06

tenable

www.cve.org

trendnet ac2600

tew-827dru

web interface

https

cleartext transmission

passwords

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

54.5%

JSON

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords.

CNA Affected

[
  {
    "product": "Trendnet AC2600 TEW-827DRU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.08B01"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2021-54