Tew 827Dru Firmware CVE-2021-20152

MEDIUM

Missing Authentication for Critical Function (CWE-306)

2021-12-30 vulnreport@tenable.com

Authentication Bypass Tew 827Dru Firmware

6.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Dec 30, 2021 - 22:15 nvd

MEDIUM 6.5

DescriptionNVD

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/web/

AnalysisAI

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306), which allows attackers to access critical functionality without authentication. Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/web/ Affected products include: Trendnet Tew-827Dru Firmware. Version information: version 2.08.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Require authentication for all sensitive operations, implement defense in depth.

More in Tew 827Dru Firmware

View all

CVE-2024-28354 CRITICAL Act Now POC

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. Rated critic

CVE-2021-20158 CRITICAL Act Now POC

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. Rated critical severity (CVS

CVE-2021-20155 CRITICAL Act Now POC

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. Rated critical severity (CVSS 9.8), this

CVE-2019-13279 CRITICAL Act Now POC

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when proces

CVE-2019-13278 CRITICAL Act Now POC

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user

CVE-2019-13276 CRITICAL Act Now POC

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary.

CVE-2024-28353 HIGH This Week POC

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. Rated high s

CVE-2021-20165 HIGH This Week POC

Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Rated high severity (CVSS 8.8),

CVE-2021-20160 HIGH This Week POC

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the de

CVE-2021-20159 HIGH This Week POC

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. Rated high severity (CVSS 8.8), this vuln

CVE-2020-14076 HIGH This Week POC

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. Rated high severity

CVE-2019-13280 HIGH This Week POC

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an

Same weakness CWE-306 – Missing Authentication for Critical Function

View all

CVE-2017-10271 HIGH POC

CVE-2025-3248 CRITICAL POC

CVE-2024-11680 CRITICAL POC

CVE-2025-0108 HIGH POC

CVE-2025-32433 CRITICAL POC

CVE-2016-2004 CRITICAL POC

CVE-2024-46506 CRITICAL POC

CVE-2025-8943 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2021-20152 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy