Priority HIGH 70
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.05155 · Published 2024-06-03 · No fix listed CWE-121
Priority LOW 38
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.05275 · Published 2024-06-03 · No fix listed CWE-121
Priority HIGH 76
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.02218 · Published 2024-03-15 · No fix listed CWE-77
Priority HIGH 73
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02121 · Published 2024-03-15 · No fix listed CWE-77
Priority LOW 39
Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00649 · Published 2021-12-30 · No fix listed CWE-352
Priority LOW 24
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00749 · Published 2021-12-30 · No fix listed CWE-522
Priority MEDIUM 46
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01664 · Published 2021-12-30 · No fix listed CWE-384
Priority MEDIUM 52
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.4006 · Published 2021-12-30 · No fix listed CWE-306
Priority MEDIUM 45
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01492 · Published 2021-12-30 · No fix listed CWE-863
Priority LOW 24
Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00814 · Published 2021-12-30 · No fix listed CWE-522
Priority LOW 23
Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00488 · Published 2021-12-30 · No fix listed CWE-312
Priority LOW 30
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00255 · Published 2021-12-30 · No fix listed CWE-287
Priority MEDIUM 44
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03134 · Published 2021-12-30 · No fix listed CWE-78
Priority MEDIUM 46
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01962 · Published 2021-12-30 · No fix listed CWE-798
Priority LOW 34
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00792 · Published 2021-12-30 · No fix listed CWE-319
Priority LOW 32
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00989 · Published 2021-12-30 · No fix listed CWE-59
Priority LOW 30
Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0085 · Published 2021-12-30 · No fix listed CWE-306
Priority MEDIUM 44
Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03109 · Published 2021-12-30 · No fix listed CWE-78
Priority MEDIUM 54
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09618 · Published 2021-12-30 · No fix listed CWE-306
Priority LOW 36
It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.016 · Published 2021-12-30 · No fix listed
Priority LOW 29
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00419 · Published 2021-12-30 · No fix listed CWE-347
Priority MEDIUM 43
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02618 · Published 2020-06-15 · No fix listed CWE-787
Priority MEDIUM 42
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01783 · Published 2020-06-15 · No fix listed CWE-787
Priority MEDIUM 44
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), allowing an authenticate…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03069 · Published 2020-06-15 · No fix listed CWE-78
Priority MEDIUM 42
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01783 · Published 2020-06-15 · No fix listed CWE-787
Load more
THREATIST.IORead the docs