CVE-2025-43988

Published: Aug 13, 2025

Modified: Aug 14, 2025

PUBLISHED

Description

KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi), allowing remote attackers to retrieve sensitive configuration data, including admin credentials.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/actuator/cve/tree/main/Kuwfi

https://kuwfi.com/products/nsa-sa-25gbps-kuwfi-6000mah-wifi-router-5g-dual-band-128users-portable-5g-wifi-router-with-sim-card-slot

https://drive.proton.me/urls/9EB08033PW#2b7dTc2x705W

https://github.com/actuator/cve/blob/main/Kuwfi/CVE-2025-43988.txt

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-43988

Description

Affected Products

References