|
196301
|
6.5 |
MEDIUM
Network
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is possible to manually install firmware that may be …
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2021-20156
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196302
|
9.8 |
CRITICAL
Network
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2021-20155
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196303
|
7.5 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive informati…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2021-20154
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196304
|
6.8 |
MEDIUM
Physics
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality is vulnerable to a symlink attack that could lead…
|
CWE-59
Link Following
|
CVE-2021-20153
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196305
|
6.5 |
MEDIUM
Network
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client …
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2021-20152
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196306
|
5.3 |
MEDIUM
Network
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually …
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2021-20150
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196307
|
9.8 |
CRITICAL
Network
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IP…
|
CWE-863
Incorrect Authorization
|
CVE-2021-20149
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196308
|
10.0 |
CRITICAL
Network
|
trendnet
|
tew-827dru_firmware
|
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying cl…
|
CWE-384
Session Fixation
|
CVE-2021-20151
|
2024-11-21 14:46 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196309
|
7.2 |
HIGH
Network
|
redhat
|
jboss_enterprise_application_platform
|
The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using…
|
-
|
CVE-2021-20318
|
2024-11-21 14:46 |
2021-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196310
|
7.5 |
HIGH
Network
|
mitsubishielectric
|
gx_works2
|
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Wo…
|
NVD-CWE-Other
|
CVE-2021-20608
|
2024-11-21 14:46 |
2021-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|