Sign in

Not rated

CVE-2021-20163 Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext on the ftpserver.asp page.

Affected products and versions

Product	Affected versions	Fixed in
Trendnet AC2600 TEW-827DRU	2.08B01	No fix stated

The 17 CVEs of Trendnet AC2600 TEW-827DRU →

CVE-2021-20165 Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections Not rated CVE-2021-20164 Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device Not rated CVE-2021-20150 Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard Not rated CVE-2021-20151 Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device Not rated

Do you use Trendnet AC2600 TEW-827DRU?

Track this CVE Watch Trendnet AC2600 TEW-827DRU Check my SBOMs

cveye.io/en/cve/CVE-2021-20163

Timeline

Published December 30, 2021
Last modified August 3, 2024

References

www.tenable.com www.tenable.com

Track this CVE