CVE-2021-20164

Published: Dec 30, 2021Modified: Nov 21, 2024

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page.

Affected (1)

Products: Trendnet: Tew 827dru Firmware

Trendnet

1 product

Tew 827dru Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Tew 827dru Firmware	Version 2.08b01

Running on/with	Platform Versions
Trendnet Tew 827dru	Version 2.0

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://www.tenable.com/security/research/tra-2021-54

Source: vulnreport@tenable.com

Third Party Advisory

https://www.tenable.com/security/research/tra-2021-54

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.