Remote Access Vulnerability in Trendnet AC2600 Router Devices

CVE-2021-20161

What is CVE-2021-20161?

The Trendnet AC2600 TEW-827DRU router versions, particularly 2.08B01, are susceptible to a security flaw that allows unauthorized physical access through the UART port. Attackers with physical access can exploit this vulnerability by connecting a serial device to the UART interface. This connection does not require authentication, granting them a root shell and full control over the router. Such an exploit can lead to unauthorized activities, including configuration changes and network manipulation.

References