What’s Vulnerable › Vulnerabilities

CVE-2021-20149

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-30 · updated 2026-06-17
• Weakness: CWE-863

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default.

Affected products

• Trendnet AC2600 TEW-827DRU: 2.08b01

References

• https://www.tenable.com/security/research/tra-2021-54
• https://www.tenable.com/security/research/tra-2021-54

Get alerted when CVE-2021-20149 or the next vulnerability affects your stack