CVE-2025-43988 – KuWFi 5G01-X55 RCE through Unauthenticated API Endpoint

The following table lists the changes that have been made to the
CVE-2025-43988 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Aug. 13, 2025

    Action Type Old Value New Value
    Added Description KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi), allowing remote attackers to retrieve sensitive configuration data, including admin credentials.
    Added Reference https://drive.proton.me/urls/9EB08033PW#2b7dTc2x705W
    Added Reference https://github.com/actuator/cve/blob/main/Kuwfi/CVE-2025-43988.txt
    Added Reference https://github.com/actuator/cve/tree/main/Kuwfi
    Added Reference https://kuwfi.com/products/nsa-sa-25gbps-kuwfi-6000mah-wifi-router-5g-dual-band-128users-portable-5g-wifi-router-with-sim-card-slot
Share the Post:

Related Posts