CVE-2021-20158

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01

Description: The issue allows an unauthenticated, malicious actor to bypass authentication and force a change of the admin password due to a hidden administrative command.

Recommendations: For Trendnet AC2600 TEW-827DRU version 2.08B01, consider disabling access to the hidden administrative command as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.