Improper access control

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is possible to manually install firmware that may be malicious in nature as there does not appear to be any signature validation done to determine if i...

Default credentials

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...

Default credentials

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...

CVE-2021-20165

CVE-2021-20165 describes a CSRF vulnerability in the Trendnet AC2600 TEW-827DRU router (version 2.08B01). The issue arises from improper CSRF protections on most pages, and on pages that do use CSRF tokens, tokens can be bypassed (e.g., by reusing an old token or token discovery). Multiple connec...

CVE-2021-20165

Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially bypassable as the server does not appear to validate them properly i.e...

CVE-2021-20164

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page...

CVE-2021-20150

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page...

CVE-2021-20151

CVE-2021-20151 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The root cause is session management that relies on IP address rather than validating cookies/session tokens, enabling session takeover if the attacker can spoof or take over the original IP. The CVSS vectors indicate network a...

CVE-2021-20151

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an attacker whether from a different computer,...

CVE-2021-20150

Affected product: Trendnet AC2600 TEW-827DRU (firmware 2.08B01). Vulnerability: Improper discloses information via redirection from the setup wizard, enabling an unauthenticated user to bypass authentication and view Admin-level information by forcing the wizard to redirect to a targeted page. Th...

CVE-2021-20149

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...

CVE-2021-20163

Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext on the ftpserver.asp page...

CVE-2021-20162

The CVE-2021-20162 entries describe a vulnerability in Trendnet AC2600 TEW-827DRU (v2.08B01) where credentials are stored in plaintext in device configuration files. Specifically, usernames and passwords are stored in plaintext on the device, with an example path: /etc/config/cameo containing the...

CVE-2021-20161

CVE-2021-20161 affects Trendnet AC2600 TEW-827DRU (v2.08B01). The root cause is insufficient protections for the UART functionality, enabling a physically proximate attacker to connect via the UART port, with no credentials required, granting a root shell and full device control. CVSS details: CV...

CVE-2021-20161

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...

CVE-2021-20162

Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext...

CVE-2021-20160

The CVE-2021-20160 entry concerns Trendnet AC2600 TEW-827DRU (firmware 2.08B01) with a command injection flaw in the SMB configuration flow. The vulnerability arises from the username parameter used when configuring SMB functionality, enabling an attacker with network access to inject commands as...

CVE-2021-20160

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter used when configuring smb functionality for the device is vulnerable to command injection as root...

CVE-2021-20155

The CVE-2021-20155 entry applies to Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The vulnerability arises from hardcoded credentials used to encrypt configuration data and the ability to back up/restore device configurations via the management web interface, exposing potential exposure of confi...

CVE-2021-20155

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...