CVE-2025-43983 in CPF908-CP5
Сводка
по MITRE • 14.08.2025
KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control vulnerabilities within goform/goform_set_cmd_process and goform/goform_get_cmd_process. These allow an unauthenticated attacker to retrieve sensitive information (including the device admin username and password), modify critical device settings, and send arbitrary SMS messages.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.