Priority MEDIUM 50
Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and potentially execute arbitrary code.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00955 · Published 2025-07-21 · Fixed in R82XXR250718 CWE-121
Priority LOW 34
ASKEY 5G NR Small Cell fails to properly filter user input for certain functionality, allowing remote attackers with administrator privilege to execute arbitrary system commands on the remote server.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00562 · Published 2024-05-27 · No fix listed CWE-78
Priority HIGH 69
An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets t…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00349 · Published 2023-01-24 · No fix listed CWE-276
Priority MEDIUM 42
Askey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 devices allow Remote Code Execution and retrieval of admin credentials to log into the Dashboard or login via SSH, leading to code execution as root.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.02301 · Published 2021-03-26 · No fix listed CWE-78
Priority LOW 30
Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0163 · Published 2020-12-11 · No fix listed CWE-330
Priority MEDIUM 49
Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04263 · Published 2020-12-11 · No fix listed CWE-78
Priority MEDIUM 47
Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02438 · Published 2020-12-10 · No fix listed CWE-521
Priority MEDIUM 47
An issue was discovered on Askey AP4000W TDC_V1.01.003 devices.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02647 · Published 2020-02-13 · No fix listed CWE-20