CVE-2020-28695

HIGH

Askey RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 - Remote Code Execution

Title source: llm
STIX 2.1

Description

Askey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 devices allow Remote Code Execution and retrieval of admin credentials to log into the Dashboard or login via SSH, leading to code execution as root.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://cr1pt0.medium.com/cve-2020-28695-8f8d618ac0b

Scores

CVSS v3 8.8
EPSS 0.0230
EPSS Percentile 81.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
askey/rtf3505vw-n1_br_sv_g000_r3505vwn1001_s32_7_firmware
Published Mar 26, 2021
Tracked Since Feb 18, 2026