VULNERABILITY INTELLIGENCE

CVE-2021-20161

CVSS score6.8 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2021-12-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with full control of the device.

Weakness classification

  • CWE-287: Improper Authentication
  • CWE-306: Missing Authentication for Critical Function

Primary references