GCVE - cpe:2.3:o:pandawireless:pwru01_firmware:2.2.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:pandawireless:pwru01_firmware:2.2.9:*:*:*:*:*:*:*

part: o version: 2.2.9 update: *

Vendor	Pandawireless (`feffb037-172c-55f1-8bdd-05f7611ad7a6`)
Product	Pwru01 Firmware (`ff1fd410-5800-5fec-bc3c-a6d1aa9e6df0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-68715`	vulnerable	2026-06-08 07:41:21.729250	Details available An issue was discovered in Panda Wireless PWRU0 devices with firmware 2.2.9 that exposes multiple HTTP endpoints (/goform/setWan, /goform/setLan, /goform/wirelessBasic) that do not enforce authentication. A remote unauthenticated attacker can modify WAN, LAN, and wireless settings directly, leading to privilege escalation and denial of service. Published: 2026-01-08T00:00:00.000Z Updated: 2026-01-09T18:38:14.203Z Open on db.gcve.eu Reference links https://github.com/actuator/cve/tree/main/PandaWireless https://github.com/actuator/cve/blob/main/PandaWireless/CVE-2025-68715.txt	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.