Description
Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options.
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://starlabs.sg/advisories/
Vendor Advisory x_refsource_misc
https://www.askey.com.tw/incident_report_notifications.html
Exploit, Third Party Advisory x_refsource_misc
https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d
Scores
CVSS v3
9.8
EPSS
0.0421
EPSS Percentile
89.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (1)
askey/ap5100w_firmware
< 1.01.097
Published
Dec 11, 2020
Tracked Since
Feb 18, 2026