Lucene search

TenableCVE-2021-20153

HistoryDec 30, 2021 - 10:15 p.m.

CVE-2021-20153

2021-12-3022:15:08

CWE-59

tenable

web.nvd.nist.gov

cve-2021-20153

trendnet ac2600

tew-827dru

symlink vulnerability

remote code execution

bittorrent functionality

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

56.7%

JSON

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality is vulnerable to a symlink attack that could lead to remote code execution on the device. If an end user inserts a flash drive with a malicious symlink on it that the bittorrent client can write downloads to, then a user is able to download arbitrary files to any desired location on the devices filesystem, which could lead to remote code execution. Example directories vulnerable to this include “config”, “downloads”, and “torrents”, though it should be noted that “downloads” is the only vector that allows for arbitrary files to be downloaded to arbitrary locations.

Affected configurations

Nvd

Node

trendnettew-827dru_firmwareMatch2.08b01

AND

trendnettew-827druMatch2.0

VendorProductVersionCPE
trendnettew-827dru_firmware2.08b01cpe:2.3:o:trendnet:tew-827dru_firmware:2.08b01:*:*:*:*:*:*:*
trendnettew-827dru2.0cpe:2.3:h:trendnet:tew-827dru:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendnet	tew-827dru_firmware	2.08b01	cpe:2.3:o:trendnet:tew-827dru_firmware:2.08b01:::::::*
trendnet	tew-827dru	2.0	cpe:2.3:h:trendnet:tew-827dru:2.0:::::::*

CNA Affected

[
  {
    "product": "Trendnet AC2600 TEW-827DRU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.08B01"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2021-54

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

56.7%

JSON

Related for CVE-2021-20153