CVE-2021-20154

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01

Description: The device contains a security flaw in its web interface, specifically that HTTPS is not enabled by default. This results in the cleartext transmission of sensitive information, such as passwords.

Recommendations: For version 2.08B01, enable HTTPS on the device to prevent the cleartext transmission of sensitive information. As a temporary workaround, consider restricting access to the web interface until HTTPS can be enabled.