Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-15023 Details

Description

Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted (and even failed) WPS authentication attempt, it is possible to brute force the overall authentication exchange. This allows an attacker to obtain the recovered WPS PIN in minutes or even seconds, and eventually obtain the Wi-Fi PSK key, gaining access to the Wi=Fi network.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.9 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d	CVE	ExploitThird Party Advisory
https://www.askey.com.tw/incident_report_notifications.html	CVE	Vendor Advisory
https://www.askey.com.tw/Products/wifi.html	CVE	ProductVendor Advisory
https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d	[email protected]	ExploitThird Party Advisory
https://www.askey.com.tw/incident_report_notifications.html	[email protected]	Vendor Advisory
https://www.askey.com.tw/Products/wifi.html	[email protected]	ProductVendor Advisory

see all 6 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-330	Use of Insufficiently Random Values	[email protected]

Affected Products

Product	Versions
askey ap5100w firmware	<= 1.01.097
CPE cpe:2.3:o:askey:ap5100w_firmware:::::::: Remediation No remediation found in references.
askey ap5100w	All versions
CPE cpe:2.3:h:askey:ap5100w:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 6, 2022	Modified Analysis	[email protected]
Dec 17, 2020	CVE Modified	[email protected]
Dec 14, 2020	Initial Analysis	[email protected]