Description

KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi), allowing remote attackers to retrieve sensitive configuration data, including admin credentials.

INFO

Published Date :

2025-08-13T00:00:00.000Z

Last Modified :

2025-08-14T14:11:41.071Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-43988 vulnerability.

No data.

CVSS Vulnerability Scoring System