Security Advisory

CVE-2021-20161

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-12-30 21:31:09

Last updated 2024-08-03 17:30:07

Assigner tenable

CVSS score not scored

State PUBLISHED

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with full control of the device.

← Browse all CVEs View on cve.org ↗