CVE-2021-20154

7.5 highEPSS 0.8%

High (7.5) in trendnet tew-827dru firmware. EPSS 0.8% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2021-12-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendnet:tew-827dru_firmware

References

https://www.tenable.com/security/research/tra-2021-54
https://www.tenable.com/security/research/tra-2021-54

Check your stack JSON