Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTrendnet Tew 827dru
HWTrendnet2.0Trendnet Tew 827dru Firmware
OSTrendnet2.08b01
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Powiązane podatności
CVE-2024-28354CRITICAL10.0PL ✓ten sam produkt
Command injection w routerze TRENDnet TEW-827DRU — zdalny dostęp root
CVE-2021-20155CRITICAL9.8ten sam produkt
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and re...
CVE-2021-20151CRITICAL10.0ten sam produkt
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The route...
CVE-2021-20149CRITICAL9.8ten sam produkt
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The...
CVE-2020-14080CRITICAL9.8ten sam produkt
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overf...