CVE-2021-20164: TRENDnet Tew-827dru Firmware

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page.

Affected products

• TRENDnet Tew-827dru Firmware: version 2.08b01 only

Published 2021-12-30. Last modified 2026-06-17.