CVE-2020-15023

Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted (and even failed) WPS authentication attempt, it is possible to brute force the overall authentication exchange. This allows an attacker to obtain the recovered WPS PIN in minutes or even seconds, and eventually obtain the Wi-Fi PSK key, gaining access to the Wi=Fi network.

• CWE-330

• https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5dExploit, Third Party Advisory
• https://www.askey.com.tw/Products/wifi.htmlProduct, Vendor Advisory
• https://www.askey.com.tw/incident_report_notifications.htmlVendor Advisory
• https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5dExploit, Third Party Advisory
• https://www.askey.com.tw/Products/wifi.htmlProduct, Vendor Advisory
• https://www.askey.com.tw/incident_report_notifications.htmlVendor Advisory

Published

Dec 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15015The FileExplorer component in GleamTech FileUltimate 6.1.5.0…6.1
• CVE-2020-15016NeDi 1.9C is vulnerable to reflected cross-site scripting. T…6.1
• CVE-2020-15017NeDi 1.9C is vulnerable to reflected cross-site scripting. T…6.1
• CVE-2020-15018playSMS through 1.4.3 is vulnerable to session fixation.6.5
• CVE-2020-1502An information disclosure vulnerability exists when Microsof…5.5
• CVE-2020-15020An issue was discovered in the Elementor plugin through 2.9.…5.4
• CVE-2020-15024An issue was discovered in the Login Password feature of the…5.5
• CVE-2020-15025ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 a…4.9
• CVE-2020-15026Bludit 3.12.0 allows admins to use a /plugin-backup-download…4.9
• CVE-2020-15027ConnectWise Automate through 2020.x has insufficient validat…9.8
• CVE-2020-15028NeDi 1.9C is vulnerable to a cross-site scripting (XSS) atta…5.4
• CVE-2020-15029NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack…5.4