CVE-2021-20152 : Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyo

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/web/

Published 2021-12-30 22:15:09

Updated 2022-01-07 16:23:56

Source Tenable Network Security, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-20152

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 30 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-20152

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:N	8.6	4.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	3.9	2.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2021-20152

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Assigned by: nvd@nist.gov (Primary)

Products affected by CVE-2021-20152

Trendnet » Tew-827dru Firmware » Version: 2.08b01
cpe:2.3:o:trendnet:tew-827dru_firmware:2.08b01:*:*:*:*:*:*:*
Matching versions
When used together with: Trendnet » Tew-827dru » Version: 2.0

Vulnerability Details : CVE-2021-20152

Exploit prediction scoring system (EPSS) score for CVE-2021-20152

CVSS scores for CVE-2021-20152

CWE ids for CVE-2021-20152

References for CVE-2021-20152

Products affected by CVE-2021-20152