← back
CVE-2025-43988

CVE-2025-43988

CVSS 7.5 HIGHEPSS 0.4%CWE-200
KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi), allowing remote attackers to retrieve sensitive configuration data, including admin credentials.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://drive.proton.me/urls/9EB08033PW#2b7dTc2x705Whttps://github.com/actuator/cve/blob/main/Kuwfi/CVE-2025-43988.txthttps://github.com/actuator/cve/tree/main/Kuwfihttps://kuwfi.com/products/nsa-sa-25gbps-kuwfi-6000mah-wifi-router-5g-dual-band-128users-portable-5g-wifi-router-with-sim-card-slot