Read the docs
TI-2025-07245 Aliases CVE-2025-7921GHSA-r7rh-8pmr-qq23

ASKEY｜modem - Stack-based Buffer Overflow

Priority MEDIUM 50CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and potentially execute arbitrary code.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00955 61st percentileScored 2026-11-07
Fix Fixed RTF8207w (ASKEY): R82XXR250718RTF8217 (ASKEY): R82XXR250718

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ASKEYRTF8207wbefore R82XXR250718R82XXR250718Patch availableCNA
ASKEYRTF8217before R82XXR250718R82XXR250718Patch availableCNA
  • RTF8207w VendorASKEY Affected before R82XXR250718 Fixed in R82XXR250718 Patch available CNA
  • RTF8217 VendorASKEY Affected before R82XXR250718 Fixed in R82XXR250718 Patch available CNA

Remediation

  • Fix · CNA RTF8207w (ASKEY) Fixed in R82XXR250718
  • Fix · CNA RTF8217 (ASKEY) Fixed in R82XXR250718

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-7921
  2. 2026-10-03 Alias added: GHSA-r7rh-8pmr-qq23

References

Advisory 2

  • TI-2022-23292 An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to… CVSS 3.1HIGH 7.8
  • TI-2020-12106 Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions… CVSS 3.1CRITICAL 9.8
  • TI-2020-16027 Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the… CVSS 3.1CRITICAL 9.8
  • TI-2020-06907 An issue was discovered on Askey AP4000W TDC_V1.01.003 devices. CVSS 3.1CRITICAL 9.8
  • TI-2020-17388 Askey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 devices allow Remote Code… CVSS 3.1HIGH 8.8
  • TI-2024-05019 ASKEY 5G NR Small Cell - Command Injection CVSS 3.1HIGH 7.2
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences