CVE-2021-27404

CVE-2021-27404 affects Askey RTF8115VW devices (BR_SV_g11.11_RTF_TEF001_V6.54_V014). The vulnerability enables injection of a Host HTTP header due to an improper handling of HTTP headers on the device. Public references in connected documents confirm the affected product/firmware naming, but the ...

Askey RTF8115VW Cross-Site Scripting Vulnerability

Askey RTF8115VW is an application from Askey China. Provides the most stable broadband connection source to bring super-fast speeds to all types of users. A cross-site scripting vulnerability exists in Askey RTF8115VW. The vulnerability stems from cgi-bin/teaccesorouter.cgi curWebPage missing...

Fastweb Askey RTV1907VW Input Validation Error Vulnerability

The Fastweb Askey RTV1907VW is a router from Fastweb Italy. An input validation error vulnerability exists in the Askey RTF8115VW. The vulnerability stems from an allowed injection in the Host HTTP header of a web service. The following products and versions are affected: Askey RTF8115VW...

CVE-2020-15357

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

CVE-2020-15357

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

CVE-2020-15023

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

CVE-2020-15023

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

Code injection

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

CVE-2020-15023

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

Authentication flaw

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

CVE-2020-15023

CVE-2020-15023 affects Askey AP5100W devices up to AP5100W_Dual_SIG_1.01.097. The root cause is poor randomness in the Diffie-Hellman exchange, enabling offline WPS PIN brute-forcing: an attacker can observe WPS attempts and brute-force the authentication exchange, recovering the WPS PIN and ulti...

CVE-2020-15023

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

CVE-2020-15357

CVE-2020-15357 affects the Askey AP5100W_Dual_SIG_1.01.097 and all prior versions. The vulnerability involves remote command execution via a shell metacharacter in the options for ping, traceroute, or route, indicating a shell injection in network-analysis functionality. The connected documents c...

CVE-2020-15357

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

PT-2020-14125 · Askey · Ap5100W

Name of the Vulnerable Software and Affected Versions: Askey AP5100W devices through AP5100W Dual SIG 1.01.097 Description: The issue arises from problems with the random number selection for the Diffie-Hellman exchange, allowing an attacker to brute force the overall authentication exchange by...

Askey AP5100W Dual SIG Security Feature Issue Vulnerability

The Askey AP5100W Dual SIG is a router from China-based Askey Electronics Technology Askey. The Askey AP5100W Dual SIG suffers from a security signature issue vulnerability that stems from a faulty random number selection in the Diffie-Hellman exchange. By capturing an attempted or even failed WP...

Askey AP5100W Dual SIG Operating System Command Injection Vulnerability

The Askey AP5100W Dual SIG is a router from Askey Electronics Technology China. A security vulnerability in the Askey AP5100W Dual SIG 1.01.097 and all prior versions can be exploited by remote attackers to execute arbitrary commands via ping, traceroute, or shell metacharacters in the routing...

CVE-2020-26201

Askey AP5100WDualSIG1.01.097 and all prior versions use a weak password at the Operating System rlx-linux level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH...

CVE-2020-26201

Askey AP5100WDualSIG1.01.097 and all prior versions use a weak password at the Operating System rlx-linux level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH...

Design/Logic Flaw

Askey AP5100WDualSIG1.01.097 and all prior versions use a weak password at the Operating System rlx-linux level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH...