[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhTd-Ji-dVWsDZ6YyDozoKtDt7pyy8-KHMU8egi4DtRw":3,"g5a-ex:trendnet\u002Ftew-827dru_firmware@*":117,"g5a-family:trendnet\u002Ftew-827dru_firmware":119},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":94,"seoMetadata":95,"meta":114},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"trendnet","tew-827dru_firmware",7,42,0,"2024-06-03",[14,17,19,21,23,25,28],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.04b01",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.04",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"2.04b03",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"2.05b11",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"2.06b04",{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},"2.08b01",16,{"version":29,"cve_count":30,"kev_count":11,"has_kev":16},"2.10b01",2,"Tew-827dru Firmware by Trendnet is a technology product with 7 tracked versions and 42 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},{"version":29,"cve_count":30,"kev_count":11,"has_kev":16},[41,49,55,61,66,72,77,81,86,90],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":48},"CVE-2021-20150","Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page.","2021-12-30",5.3,"v3.1","Medium",0.4006,{"cveId":50,"description":51,"publishedDate":44,"cvssScore":52,"cvssVersion":46,"severity":53,"isKev":16,"epssScore":54},"CVE-2021-20158","Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command.",9.8,"Critical",0.09471,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":52,"cvssVersion":59,"severity":53,"isKev":16,"epssScore":60},"CVE-2019-13278","TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.","2019-07-10","v3.0",0.08783,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":64,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":65},"CVE-2024-36729","TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wizard_ipv6 with a sufficiently long reboot_type key.",6.3,0.05275,{"cveId":67,"description":68,"publishedDate":12,"cvssScore":69,"cvssVersion":46,"severity":70,"isKev":16,"epssScore":71},"CVE-2024-36728","TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlan_setting with a sufficiently long dns1 or dns 2 key.",8.1,"High",0.05155,{"cveId":73,"description":74,"publishedDate":44,"cvssScore":75,"cvssVersion":46,"severity":70,"isKev":16,"epssScore":76},"CVE-2021-20160","Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter used when configuring smb functionality for the device is vulnerable to command injection as root.",8.8,0.03135,{"cveId":78,"description":79,"publishedDate":44,"cvssScore":75,"cvssVersion":46,"severity":70,"isKev":16,"epssScore":80},"CVE-2021-20159","Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter.",0.03109,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":75,"cvssVersion":46,"severity":70,"isKev":16,"epssScore":85},"CVE-2020-14075","TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), allowing an authenticated user to run arbitrary commands on the device.","2020-06-15",0.03069,{"cveId":87,"description":88,"publishedDate":58,"cvssScore":52,"cvssVersion":59,"severity":53,"isKev":16,"epssScore":89},"CVE-2019-13276","TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.",0.02767,{"cveId":91,"description":92,"publishedDate":58,"cvssScore":52,"cvssVersion":59,"severity":53,"isKev":16,"epssScore":93},"CVE-2019-13279","TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.",0.02712,[],{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Tew-827dru Firmware by Trendnet - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tew-827dru Firmware by Trendnet covering 7 versions with 42 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tew-827dru Firmware vulnerabilities, Tew-827dru Firmware security, Tew-827dru Firmware CVE, Trendnet Tew-827dru Firmware, Tew-827dru Firmware threat intelligence, Trendnet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":100,"@type":101,"name":102,"description":97,"url":103,"manufacturer":104,"applicationCategory":108,"softwareVersion":109,"mainEntity":110},"https:\u002F\u002Fschema.org","SoftwareApplication","Tew-827dru Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftrendnet\u002Ftew-827dru_firmware",{"@type":105,"name":106,"url":107},"Organization","Trendnet","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrendnet","Security Software","7 versions tracked",{"@type":111,"name":112,"description":113,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Tew-827dru Firmware Security Vulnerabilities","Security vulnerabilities affecting Tew-827dru Firmware by Trendnet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":115,"apiVersion":116},"2026-10-19T18:12:44.359Z","3.0",{"rows":118,"total":11,"capped":16,"failed":11},[],[]]