CVE-2021-20149

EPSS 0.71%
Veröffentlicht 30.12.2021 22:15:08
Zuletzt bearbeitet 21.11.2024 05:46:00
Quelle vulnreport@tenable.com
CVE-Watchlists
Login
Unerledigt
Login

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trendnet ≫ Tew-827dru Firmware Version2.08b01

Trendnet ≫ Tew-827dru Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.71%	0.712

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://www.tenable.com/security/research/tra-2021-54

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-20149

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-20149

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-20149

EUVD