2022 matches found
Default credentials
Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext...
Default credentials
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...
Default credentials
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page...
Cross site request forgery (csrf)
Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially bypassable as the server does not appear to validate them properly i.e...
Session fixation
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an attacker whether from a different computer,...
Design/Logic Flaw
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality is vulnerable to a symlink attack that could lead to remote code execution on the device. If an end user inserts a flash drive with a malicious...
Hardcoded credentials
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...
Design/Logic Flaw
Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/web/...
CVE-2021-20165
CVE-2021-20165 describes a CSRF vulnerability in the Trendnet AC2600 TEW-827DRU router (version 2.08B01). The issue arises from improper CSRF protections on most pages, and on pages that do use CSRF tokens, tokens can be bypassed (e.g., by reusing an old token or token discovery). Multiple connec...
CVE-2021-20165
Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially bypassable as the server does not appear to validate them properly i.e...
CVE-2021-20164
CVE-2021-20164 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The vulnerability is an information disclosure where credentials (usernames and passwords for all SMB users) are revealed in plaintext on the smbserver.asp page. Other details in connected docs confirm the issue is tied to SMB ...
CVE-2021-20164
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page...
CVE-2021-20150
Affected product: Trendnet AC2600 TEW-827DRU (firmware 2.08B01). Vulnerability: Improper discloses information via redirection from the setup wizard, enabling an unauthenticated user to bypass authentication and view Admin-level information by forcing the wizard to redirect to a targeted page. Th...
CVE-2021-20151
CVE-2021-20151 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The root cause is session management that relies on IP address rather than validating cookies/session tokens, enabling session takeover if the attacker can spoof or take over the original IP. The CVSS vectors indicate network a...
CVE-2021-20150
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page...
CVE-2021-20151
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an attacker whether from a different computer,...
CVE-2021-20149
CVE-2021-20149 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). Connected sources describe insufficient access controls on the WAN interface, with IPv6 access enabled by default while the default IPv4-only iptables ruleset does not govern IPv6. The consequence is that all services on the de...
CVE-2021-20149
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...
CVE-2021-20163
CVE-2021-20163 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The issue is an information disclosure where usernames and passwords for all FTP users are exposed in plaintext on the ftpserver.asp page of the router’s FTP/web interface. The connected documents confirm the affected product a...