Sign in

Not rated

CVE-2021-20159 Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter.

Affected products and versions

Product	Affected versions	Fixed in
Trendnet AC2600 TEW-827DRU	2.08B01	No fix stated

The 17 CVEs of Trendnet AC2600 TEW-827DRU →

CVE-2021-20165 Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections Not rated CVE-2021-20164 Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device Not rated CVE-2021-20150 Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard Not rated CVE-2021-20151 Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device Not rated

Do you use Trendnet AC2600 TEW-827DRU?

Track this CVE Watch Trendnet AC2600 TEW-827DRU Check my SBOMs

cveye.io/en/cve/CVE-2021-20159

Timeline

Published December 30, 2021
Last modified August 3, 2024

References

www.tenable.com www.tenable.com

Track this CVE