CVE-2020-15023
MEDIUM
5,9
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
MEDIUM
4,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none
Description
AI Translation Available
Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted (and even failed) WPS authentication attempt, it is possible to brute force the overall authentication exchange. This allows an attacker to obtain the recovered WPS PIN in minutes or even seconds, and eventually obtain the Wi-Fi PSK key, gaining access to the Wi=Fi network.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0034
Percentile
0,6th
Updated
EPSS Score Trend (Last 91 Days)
330
Use of Insufficiently Random Values
StableCommon Consequences
Security Scopes Affected:
Confidentiality
Other
Access Control
Potential Impacts:
Other
Bypass Protection Mechanism
Gain Privileges Or Assume Identity
Applicable Platforms
All platforms may be affected
Operating System
Ap5100W Firmware by Askey
Version Range Affected
To
1.01.097
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:o:askey:ap5100w_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-a…
https://www.askey.com.tw/incident_report_notifications.html
https://www.askey.com.tw/Products/wifi.html
https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-a…
https://www.askey.com.tw/incident_report_notifications.html
https://www.askey.com.tw/Products/wifi.html