PT-2021-13809
CVE-2021-20154
·
تاريخ النشر
2021-12-30
·
تاريخ التحديث
2022-01-07
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Trendnet AC2600 TEW-827DRU version 2.08B01
Description:
The device contains a security flaw in its web interface, specifically that HTTPS is not enabled by default. This results in the cleartext transmission of sensitive information, such as passwords.
Recommendations:
For version 2.08B01, enable HTTPS on the device to prevent the cleartext transmission of sensitive information. As a temporary workaround, consider restricting access to the web interface until HTTPS can be enabled.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾