CVE-2021-20162: TRENDnet Tew-827dru Firmware

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext.

Affected products

• TRENDnet Tew-827dru Firmware: version 2.08b01 only

Published 2021-12-30. Last modified 2026-06-17.