CVE-2021-20156

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is possible to manually install firmware that may be malicious in nature as there does not appear to be any signature validation done to determine if i...

PT-2021-13806

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue is related to a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies or...

PT-2021-13807

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue is related to a lack of proper authentication in the bittorrent functionality. If this functionality is enabled, it allows anyone to visit and modify settings and files via the...

CVE-2021-20152: Missing Authentication for Critical Function

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/web/...

Trendnet AC2600 操作系统命令注入漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.Trendnet AC2600 TEW-827DRU has a security vulnerability that can be exploited by attackers to conduct command injection attacks as root...

Trendnet AC2600 安全漏洞

Trendnet AC2600 TEW-827DRU is a wireless router. Trendnet AC2600 TEW-827DRU has a security vulnerability that can be exploited by attackers to disclose information via ftp web pages...

Trendnet AC2600 安全漏洞

The Trendnet AC2600 is a wireless router from Trendnet, Inc. A security vulnerability exists in the Trendnet AC2600 TEW-827DRU version 2.08B01, which stems from the software not having sufficient access control on the WAN interface. The default iptables ruleset for managing service access on the...

CVE-2021-20150: Missing Authentication for Critical Function

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page...

PT-2021-13816

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue concerns insufficient protections for the UART functionality. A malicious actor with physical access to the device can connect to the UART port via a serial connection, gaining...

Trendnet AC2600 访问控制错误漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.A security vulnerability exists in the Trendnet AC2600 TEW-827DRU, which stems from the fact that the Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protection for the UART function, and an attacker could exploit the vulnerabili...

CVE-2021-20151: Session Fixation

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an attacker whether from a different computer,...

Trendnet AC2600 安全漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.A security vulnerability exists in Trendnet AC2600 TEW-827DRU version 2.08B01, which could be exploited by an attacker to cause plaintext transmission of sensitive information e.g., passwords...

Trendnet AC2600 访问控制错误漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.A security vulnerability exists in Trendnet AC2600 TEW-827DRU version 2.08B01, which stems from a lack of proper authentication for the bittorrent feature. If enabled, an attacker could exploit the vulnerability to access and modify settings and fil...

Trendnet AC2600 授权问题漏洞

The Trendnet AC2600 is a wireless router from Trendnet. The Trendnet AC2600 TEW-827DRU version 2.08B01 has an authorization issue vulnerability that stems from a flaw in the device's session management. The router's management software manages IP address-based web sessions instead of validating...

PT-2021-13808

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The bittorrent functionality in the affected device contains a symlink vulnerability. If enabled, this functionality is vulnerable to a symlink attack that could lead to remote code...

Trendnet AC2600 数据伪造问题漏洞

Trendnet AC2600 TEW-827DRU is a wireless router. version 2.08B01 of the Trendnet AC2600 TEW-827DRU has a security vulnerability that stems from incorrect access control configuration, which could allow an attacker to maliciously update the firmware...

Trendnet AC2600 后置链接漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.Trendnet AC2600 TEW-827DRU version 2.08B01 has a security vulnerability that can be exploited by attackers to cause remote code execution on the device...

PT-2021-13811

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue is related to an improper access control configuration that could allow for a malicious firmware update. It is possible to manually install firmware that may be malicious in...

Trendnet AC2600 安全漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.The Trendnet AC2600 TEW-827DRU has a security vulnerability that could be exploited by an attacker to store user names and passwords in plaintext in the device's configuration file...

CVE-2021-20154: Cleartext Transmission of Sensitive Information

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords...