CVE-2020-15023 : Security Advisory and Response

Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are vulnerable to WPS PIN offline brute-force cracking due to issues with random number selection for the Diffie-Hellman exchange. Attackers can exploit this to obtain the Wi-Fi PSK key.

Understanding CVE-2020-15023

Askey AP5100W devices are susceptible to a WPS PIN offline brute-force attack, potentially leading to unauthorized access to the Wi-Fi network.

What is CVE-2020-15023?

CVE-2020-15023 refers to the vulnerability in Askey AP5100W devices that allows attackers to perform offline brute-force cracking of WPS PINs, exploiting flaws in the Diffie-Hellman exchange.

The Impact of CVE-2020-15023

The vulnerability enables attackers to recover WPS PINs within minutes or seconds, leading to unauthorized access to the Wi-Fi network and compromising its security.

Technical Details of CVE-2020-15023

Askey AP5100W devices are affected by a specific vulnerability that facilitates WPS PIN offline brute-force cracking.

Vulnerability Description

The issue arises from the random number selection for the Diffie-Hellman exchange.
Attackers can capture WPS authentication attempts and brute force the authentication exchange.

Affected Systems and Versions

Product: Askey AP5100W
Versions: Through AP5100W_Dual_SIG_1.01.097

Exploitation Mechanism

Attackers capture WPS authentication attempts, even failed ones, to perform brute-force attacks and recover the WPS PIN, eventually gaining access to the Wi-Fi PSK key.

Mitigation and Prevention

It is crucial to take immediate steps to address and prevent the exploitation of CVE-2020-15023.

Immediate Steps to Take

Disable WPS functionality on Askey AP5100W devices.
Implement strong, unique Wi-Fi passwords.
Regularly monitor network activity for any suspicious behavior.

Long-Term Security Practices

Keep firmware and software up to date to patch known vulnerabilities.
Conduct regular security audits and assessments to identify and mitigate potential risks.

Patching and Updates

Check for firmware updates from Askey to address the CVE-2020-15023 vulnerability.