CVE-2020-26201

Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level

published December 10, 2020

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

⚠️ A weak password at the operating system level leaves Askey AP5100W vulnerable to unauthorized access, like leaving the back door to your house wide open! 🔥 Think of it as a hotel room where the door lock is so flimsy, anyone could push it open with a firm shove. This vulnerability allows attackers to waltz right in as an admin or root user without breaking a sweat. Once inside, an attacker could completely take over the device, snooping on traffic or even altering settings in ways you might never realize. This could lead to data breaches or compromised networks, creating chaos without even a sound!

Put simply

Think of it as a hotel room where the door lock is so flimsy, anyone could push it open with a firm shove. This vulnerability allows attackers to waltz right in as an admin or root user without breaking a sweat. The CVE-2020-26201 vulnerability allows unauthorized access through weak passwords on the rlx-linux operating system via Telnet or SSH. This means that an attacker can log in as an admin or root user just by guessing or brute-forcing the password.

What to do

Once inside, an attacker could completely take over the device, snooping on traffic or even altering settings in ways you might never realize. This could lead to data breaches or compromised networks, creating chaos without even a sound! To secure your device, change the default weak passwords immediately and enable stronger password policies. Additionally, consider disabling Telnet in favor of more secure protocols and keep your firmware updated to the latest version to avoid other potential vulnerabilities. You've got this! Follow these steps and you'll be one step closer to safeguarding your network! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02438 · 84.2th percentile
Published
2020-12-10T21:02Z
EPSS history
Timeline
  • 10 DEC 21:02Z
    Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level
    cvelistv5