PT-2021-13805 · Trendnet · Trendnet Ac2600 Tew-827Dru

Published 2021-12-30 · Updated 2022-07-12 · CVE-2021-20150

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01

Description: The issue allows information disclosure via redirection from the setup wizard. An attacker can bypass authentication and view information as an administrator by manually browsing to the setup wizard and forcing it to redirect to the desired page.

Recommendations: For Trendnet AC2600 TEW-827DRU version 2.08B01, consider restricting access to the setup wizard to prevent unauthorized redirection and information disclosure. As a temporary workaround, limit manual browsing to the setup wizard to minimize the risk of exploitation.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-20150

Affected Products

Trendnet Ac2600 Tew-827Dru

References · 4

• https://osv.dev/vulnerability/CVE-2021-20150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20150 · Security Note
• https://tenable.com/security/research/tra-2021-54 · Note
• https://t.me/cvenotify/25098 · Telegram Post