CVE-2021-20161

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality

published December 30, 2021

CVSS
—
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with full control of the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Published
2021-12-30T21:31Z
EPSS history
Timeline
  • 30 DEC 21:31Z
    Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality
    cvelistv5