PT-2020-16337 · Askey+1 · Askey Ap5100W Dual Sig+1

Published 2020-12-10 · Updated 2022-08-06 · CVE-2020-26201

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Askey AP5100W Dual SIG versions 1.01.097 and all prior versions

Description The issue allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH, due to a weak password used at the Operating System (rlx-linux) level.

Recommendations For Askey AP5100W Dual SIG versions 1.01.097 and all prior versions, consider changing the default password to a strong one to prevent unauthorized access. As a temporary workaround, consider disabling Telnet and SSH access to the device until a patch is available. Restrict access to the device Operating System to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2020-26201

Affected Products

Askey Ap5100W Dual Sig

Rlx-Linux

References · 13

• 🔥 https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-26201 · Security Note
• https://askey.com.tw · Vendor Advisory
• https://askey.com.tw/incident_report_notifications.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26201 · Vendor Advisory
• https://t.me/cibsecurity/19664 · Telegram Post
• https://t.me/cibsecurity/19704 · Telegram Post
• https://t.me/cibsecurity/19724 · Telegram Post
• https://t.me/cvenotify/7274 · Telegram Post
• https://t.me/cibsecurity/19684 · Telegram Post
• https://t.me/cibsecurity/19764 · Telegram Post
• https://t.me/cibsecurity/19744 · Telegram Post
• https://t.me/cibsecurity/19644 · Telegram Post