CVE-2021-20149

Summary

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default.

Affected Software

VendorProductVersion RangeStatus
n/aTrendnet AC2600 TEW-827DRU2.08B01affected

Weaknesses

  • Improper Access Control

ADP Enrichment

CVE Program Container

Additional References

References