CVE-2021-20163: TRENDnet Tew-827dru Firmware

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext on the ftpserver.asp page.

Affected products

• TRENDnet Tew-827dru Firmware: version 2.08b01 only

Published 2021-12-30. Last modified 2026-06-17.