CVE-2021-20154: High severity trendnet tew-827dru vulnerability
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-20154?
CVE-2021-20154 is classified as a medium severity vulnerability due to the potential for sensitive information exposure.
How do I fix CVE-2021-20154?
To fix CVE-2021-20154, enable HTTPS on the Trendnet AC2600 TEW-827DRU web interface to securely transmit sensitive information.
What types of information are affected by CVE-2021-20154?
CVE-2021-20154 affects sensitive information such as passwords and configuration data that could be transmitted in cleartext.
Which versions of the firmware are impacted by CVE-2021-20154?
CVE-2021-20154 impacts Trendnet TEW-827DRU firmware version 2.08B01.
Is there a workaround for CVE-2021-20154?
A possible workaround for CVE-2021-20154 is to implement network-level protections, but enabling HTTPS is the recommended solution.