CVE-2020-28695

EUVD-2020-21093
Askey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 devices allow Remote Code Execution and retrieval of admin credentials to log into the Dashboard or login via SSH, leading to code execution as root.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Affected Products (NVD)
VendorProductVersion
askeyrtf3505vw-n1_br_sv_g000_r3505vwn1001_s32_7_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cr1pt0.medium.com/cve-2020-28695-8f8d618ac0b
https://cr1pt0.medium.com/cve-2020-28695-8f8d618ac0b