CVE-2021-20160: TRENDnet Tew-827dru Firmware

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter used when configuring smb functionality for the device is vulnerable to command injection as root.

Affected products

• TRENDnet Tew-827dru Firmware: version 2.08b01 only

Published 2021-12-30. Last modified 2026-06-17.