CVE-2021-20163

4.9 mediumEPSS 0.8%

Medium (4.9) in trendnet tew-827dru firmware. EPSS 0.8% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext on the ftpserver.asp page.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2021-12-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendnet:tew-827dru_firmware

References

https://www.tenable.com/security/research/tra-2021-54
https://www.tenable.com/security/research/tra-2021-54

Check your stack JSON