Cross-Site Request Forgery Risk in Trendnet AC2600 TEW-827DRU Router

CVE-2021-20165

What is CVE-2021-20165?

The Trendnet AC2600 TEW-827DRU router suffers from inadequate CSRF protections, exposing it to potential exploitation. Many pages within the device interface fail to implement proper CSRF mitigations, while those that do utilize CSRF tokens do not validate them effectively. This allows an attacker to potentially reuse old tokens or extract tokens through insecure methods, compromising the integrity of user actions and data.

References