TF
Product
Tew-827dru Firmware
42
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 24Medium 9Low 0
Watch
Add Tew-827dru Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28354 | 10.0 | Mar 15 | There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01 Affected: 2.10b01 |
| CVE-2021-20151 | 10.0 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device Affected: 2.08b01 |
| CVE-2021-20158 | 9.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability Affected: 2.08b01 |
| CVE-2021-20155 | 9.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials Affected: 2.08b01 |
| CVE-2021-20149 | 9.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface Affected: 2.08b01 |
| CVE-2020-14080 | 9.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2019-13279 | 9.8 | Jul 10 | TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an… Affected: through 2.04b03 |
| CVE-2019-13278 | 9.8 | Jul 10 | TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated… Affected: through 2.04b03 |
| CVE-2019-13276 | 9.8 | Jul 10 | TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary Affected: through 2.04b03 |
| CVE-2024-28353 | 8.8 | Mar 15 | There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01 Affected: 2.10b01 |
| CVE-2021-20165 | 8.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections Affected: 2.08b01 |
| CVE-2021-20160 | 8.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device Affected: 2.08b01 |
| CVE-2021-20159 | 8.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection Affected: 2.08b01 |
| CVE-2020-14076 | 8.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2020-14081 | 8.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_passwd), allowing an… Affected: through 2.06b04 |
| CVE-2020-14079 | 8.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2020-14078 | 8.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2020-14077 | 8.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2020-14075 | 8.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key… Affected: through 2.06b04 |
| CVE-2020-14074 | 8.8 | Jun 15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2019-13280 | 8.8 | Jul 9 | TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a… Affected: through 2.04b03 |
| CVE-2019-13155 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2019-13154 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2019-13153 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2019-13152 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2019-13151 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2019-13150 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2019-13149 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2019-13148 | 8.8 | Jul 2 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11 Affected: before 2.05b11 |
| CVE-2024-36728 | 8.1 | Jun 3 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2021-20157 | 7.5 | Dec 30 | It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command Affected: All versions, or not specified |
| CVE-2021-20154 | 7.5 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface Affected: 2.08b01 |
| CVE-2019-13277 | 7.5 | Jul 9 | TRENDnet TEW-827DRU with firmware up to and including 2.04B03 allows an unauthenticated attacker to execute setup wizard functionality, giving this attacker the ability to change… Affected: through 2.04b03 |
| CVE-2021-20161 | 6.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality Affected: 2.08b01 |
| CVE-2021-20153 | 6.8 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality Affected: 2.08b01 |
| CVE-2021-20156 | 6.5 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update Affected: 2.08b01 |
| CVE-2021-20152 | 6.5 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality Affected: 2.08b01 |
| CVE-2024-36729 | 6.3 | Jun 3 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary Affected: through 2.06b04 |
| CVE-2021-20150 | 5.3 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard Affected: 2.08b01 |
| CVE-2021-20164 | 4.9 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device Affected: 2.08b01 |
| CVE-2021-20163 | 4.9 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page Affected: 2.08b01 |
| CVE-2021-20162 | 4.9 | Dec 30 | Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext Affected: 2.08b01 |
Showing 42
