CVE-2021-20160

8.8 highEPSS 3.1%

High (8.8) in trendnet tew-827dru firmware. EPSS 3.1% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter used when configuring smb functionality for the device is vulnerable to command injection as root.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2021-12-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendnet:tew-827dru_firmware

References

https://www.tenable.com/security/research/tra-2021-54
https://www.tenable.com/security/research/tra-2021-54

Check your stack JSON