Improper Authentication in Trendnet AC2600 Bittorrent Functionality

CVE-2021-20152

What is CVE-2021-20152?

The Trendnet AC2600 TEW-827DRU device's Bittorrent functionality is susceptible to improper authentication, allowing any user to access and modify sensitive settings and files without the necessary credentials. This vulnerability manifests when the Bittorrent feature is enabled, providing unauthorized users the ability to reach the web client through an easily guessed local address, which may lead to significant security risks for network configurations.

References