Ac900 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:kuwfi:ac900_firmware:1.0.13:*:*:*:*:*:*:*
part: o version: 1.0.13 update: *
| Vendor | Kuwfi (0a9944c2-bd02-53c0-96d9-76a58eb1f86d) |
|---|---|
| Product | Ac900 Firmware (c940670c-d30c-5a3e-9093-d960171c8a49) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-68706 |
vulnerable | 2026-06-08 07:41:21.717111 |
Details available
A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf() to copy the user-supplied pincode parameter into a fixed 132-byte stack buffer with no bounds checks. This allows an attacker to corrupt adjacent stack memory, crash the web server, and (under certain conditions) may enable arbitrary code execution.
Published: 2025-12-29T00:00:00.000Z
Updated: 2025-12-31T16:59:00.763Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.