CVE-2020-15357

Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options.

• CWE-78

• https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5dExploit, Third Party Advisory
• https://starlabs.sg/advisories/Exploit, Third Party Advisory
• https://www.askey.com.tw/incident_report_notifications.htmlVendor Advisory
• https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5dExploit, Third Party Advisory
• https://starlabs.sg/advisories/Exploit, Third Party Advisory
• https://www.askey.com.tw/incident_report_notifications.htmlVendor Advisory

Published

Dec 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15350RIOT 2020.04 has a buffer overflow in the base64 decoder. Th…9.8
• CVE-2020-15351IDrive before 6.7.3.19 on Windows installs by default to %PR…7.8
• CVE-2020-15352An XML external entity (XXE) vulnerability in Pulse Connect …7.2
• CVE-2020-15354Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-15355Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-15356Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-15358In SQLite before 3.32.3, select.c mishandles query-flattener…5.5
• CVE-2020-1536An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15360com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege…7.8
• CVE-2020-15362wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code I…9.8
• CVE-2020-15363The Nexos theme through 1.7 for WordPress allows side-map/?s…9.8
• CVE-2020-15364The Nexos theme through 1.7 for WordPress allows top-map/?se…6.1