Non notée
CVE-2021-20161 Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality
Description
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with full control of the device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Trendnet AC2600 TEW-827DRU | 2.08B01 | Pas de correctif indiqué |
Références
- www.tenable.com www.tenable.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Trendnet AC2600 TEW-827DRU
Les 17 CVE de Trendnet AC2600 TEW-827DRU →
CVE-2021-20165
Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections
Non notée
CVE-2021-20164
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device
Non notée
CVE-2021-20150
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard
Non notée
CVE-2021-20151
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device
Non notée