CVE-2025-43983 in CPF908-CP5thông tin

Tóm tắt

Bởi MITRE • 14/08/2025

KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control vulnerabilities within goform/goform_set_cmd_process and goform/goform_get_cmd_process. These allow an unauthenticated attacker to retrieve sensitive information (including the device admin username and password), modify critical device settings, and send arbitrary SMS messages.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

chịu trách nhiệm

MITRE

Đặt trước

21/04/2025

Tiết lộ

14/08/2025

Kiểm duyệt

được chấp nhận

EPSS

0.00383

KEV

không

Các hoạt động

rất thấp

Nguồn

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!