CVE-2021-20154: Cleartext Transmission of Sensitive Information

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords...

CVE-2021-20164: Insufficiently Protected Credentials

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page...

PT-2021-13819

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue concerns the improper disclosure of credentials for the smb functionality of the device. Specifically, usernames and passwords for all smb users are revealed in plaintext on th...

Trendnet AC2600 跨站请求伪造漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.Trendnet AC2600 TEW-827DRU has a security vulnerability, which originates from Trendnet AC2600 TEW-827DRU version 2.08B01 fails to properly implement csrf protection, no details of the vulnerability are provided...

Trendnet AC2600 信任管理问题漏洞

The Trendnet AC2600 TEW-827DRU is a wireless router that has a security vulnerability that could be exploited by attackers to back up and restore device configurations through the management web interface. The devices are encrypted using the hard-coded password "12345678"...

CVE-2021-20155: Use of Hard-coded Credentials

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...

PT-2021-13820

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue is related to the improper implementation of CSRF protections. Most pages lack proper usage of CSRF protections or mitigations. For pages that do use CSRF tokens, these tokens...

Trendnet AC2600 访问控制错误漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.Trendnet AC2600 TEW-827DRU version 2.08B01 has a security vulnerability that can be exploited by an attacker to manually navigate through the setup wizard and force it to redirect to the desired page, which can bypass authentication and allow users ...

CVE-2021-20161: Improper Authentication

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...

Trendnet AC2600 访问控制错误漏洞

Trendnet AC2600 TEW-827DRU is a wireless router. version 2.08B01 of the Trendnet AC2600 TEW-827DRU contains a security vulnerability that stems from a hidden administrative command that could be exploited to force an attacker to change the administrator password...

CVE-2021-20158: Missing Authentication for Critical Function

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command...

CVE-2021-20165: Cross-Site Request Forgery (CSRF)

Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially bypassable as the server does not appear to validate them properly i.e...

PT-2021-13805

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue allows information disclosure via redirection from the setup wizard. An attacker can bypass authentication and view information as an administrator by manually browsing to the...

PT-2021-13810

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue concerns the use of hardcoded credentials in the device. It is possible to backup and restore device configurations via the management web interface. These devices are encrypte...

PT-2021-13809

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The device contains a security flaw in its web interface, specifically that HTTPS is not enabled by default. This results in the cleartext transmission of sensitive information, such as...

CVE-2021-20160: Improper Neutralization of Special Elements used in an OS Command

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter used when configuring smb functionality for the device is vulnerable to command injection as root...

CVE-2021-20162: Cleartext Storage of Sensitive Information

Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext...

Trendnet AC2600 操作系统命令注入漏洞

Trendnet AC2600 TEW-827DRU is a wireless router.The Trendnet AC2600 TEW-827DRU is vulnerable to a security flaw that could be exploited by attackers to inject commands as root user by providing incorrectly formatted parameters...

PT-2021-13813

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue allows an unauthenticated, malicious actor to bypass authentication and force a change of the admin password due to a hidden administrative command. Recommendations: For Trendn...

CVE-2021-20163: Insufficiently Protected Credentials

Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext on the ftpserver.asp page...