Improper Authentication in Trendnet AC2600 Bittorrent Functionality
CVE-2021-20152

6.5MEDIUM

Key Information:

Vendor

Trendnet

Status
Trendnet Ac2600 Tew-827dru
Vendor
CVE Published:
30 December 2021

What is CVE-2021-20152?

The Trendnet AC2600 TEW-827DRU device's Bittorrent functionality is susceptible to improper authentication, allowing any user to access and modify sensitive settings and files without the necessary credentials. This vulnerability manifests when the Bittorrent feature is enabled, providing unauthorized users the ability to reach the web client through an easily guessed local address, which may lead to significant security risks for network configurations.

Affected Version(s)

Trendnet AC2600 TEW-827DRU 2.08B01

References

https://www.tenable.com/security/research/tra-2021-54
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-20152 : Improper Authentication in Trendnet AC2600 Bittorrent Functionality