CVE-2021-20161: TRENDnet Tew-827dru Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with full control of the device.

Affected products

• TRENDnet Tew-827dru Firmware: version 2.08b01 only

Published 2021-12-30. Last modified 2026-06-17.