PT-2021-13818
CVE-2021-20163
·
تاريخ النشر
2021-12-30
·
تاريخ التحديث
2022-01-07
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Trendnet AC2600 TEW-827DRU version 2.08B01
Description:
The issue concerns the leakage of information via the ftp web page, where usernames and passwords for all ftp users are revealed in plaintext on the "ftpserver.asp" page.
Recommendations:
For Trendnet AC2600 TEW-827DRU version 2.08B01, consider restricting access to the "ftpserver.asp" page until a fix is available. As a temporary workaround, avoid using the ftp feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾