CVE-2020-26201 - Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level

Back Back to CVE browser

CRITICAL

Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level

Published Dec 10, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.44%

Description

Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-521

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-18826
Advisory
https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d
x_refsource_MISCExploitThird Party Advisory
https://www.askey.com.tw/
x_refsource_MISCVendor Advisory
https://www.askey.com.tw/incident_report_notifications.html
x_refsource_CONFIRMBroken LinkVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-18826		Advisory
https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d		x_refsource_MISCExploitThird Party Advisory
https://www.askey.com.tw/		x_refsource_MISCVendor Advisory
https://www.askey.com.tw/incident_report_notifications.html		x_refsource_CONFIRMBroken LinkVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 10, 2020

Updated Aug 4, 2024

Reserved Sep 30, 2020

Link CVE-2020-26201

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-26201

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 10, 2020

Updated Aug 4, 2024

Link EUVD-2020-18826

GitHub

No data