CVE-2020-8614

CRITICAL

Askey AP4000W TDC_V1.01.003 - Remote Code Execution via bd_svr Service

Title source: llm

Description

An issue was discovered on Askey AP4000W TDC_V1.01.003 devices. An attacker can perform Remote Code Execution (RCE) by sending a specially crafted network packer to the bd_svr service listening on TCP port 54188.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://improsec.com/tech-blog/RCE-Askey

Scores

CVSS v3 9.8

EPSS 0.0265

EPSS Percentile 83.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (1)

askey/ap4000w_firmware tdc_v1.01.003

Published Feb 13, 2020

Tracked Since Feb 18, 2026