Security Advisory

CVE-2024-53946

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-14 00:00:00

Last updated 2025-08-14 15:50:12

Assigner mitre

State PUBLISHED

Description

The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its web management interface. This vulnerability allows an attacker to trick an authenticated admin user into performing unauthorized actions, such as exploiting a command injection vulnerability in /goform/formMultiApnSetting. Successful exploitation can also lead to unauthorized configuration changes.

← Browse all CVEs View on cve.org ↗