Vulnerability in Trendnet Tew-827dru
CVE-2021-20154
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords.
EPSS: 0.008 (51.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Trendnet Tew-827dru — versions 2.0
- Trendnet Tew-827dru_firmware — versions 2.08b01
- N/a Trendnet Ac2600 Tew-827dru — versions 2.08B01
Weakness classification (CWE)
Public proof-of-concept exploits
References
- vulnreport@tenable.com (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-20154?
- CVE-2021-20154 is a high-severity vulnerability in Trendnet Tew-827dru, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2021-12-30.
- How severe is CVE-2021-20154?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-20154 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.