Approved changes feed: RSS · Atom
cpe:2.3:h:kuwfi:ac900:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Kuwfi (0a9944c2-bd02-53c0-96d9-76a58eb1f86d) |
|---|---|
| Product | Ac900 (ab69758a-d4bf-5dfe-9076-83cbc3f918e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-68706 |
not_vulnerable | 2026-06-08 07:41:21.718240 |
Details available
A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf() to copy the user-supplied pincode parameter into a fixed 132-byte stack buffer with no bounds checks. This allows an attacker to corrupt adjacent stack memory, crash the web server, and (under certain conditions) may enable arbitrary code execution.
Published: 2025-12-29T00:00:00.000Z
Updated: 2025-12-31T16:59:00.763Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.