Vulnerabilities

TI-2020-11810 CVE-2020-15023 · GHSA-c8j2-m9gv-4p68

Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline…

LOW 30

Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0163 Published 2020-12-11 No fix listed CWE-330

TI-2020-12106 CVE-2020-15357 · GHSA-pm7g-wr2h-x45m

Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions…

MEDIUM 49

Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04263 Published 2020-12-11 No fix listed CWE-78

TI-2020-16027 CVE-2020-26201 · GHSA-77qw-xvp6-89m4

Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the…

MEDIUM 47

Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02438 Published 2020-12-10 No fix listed CWE-521

Vulnerabilities

Filters

Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline…

Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions…

Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the…