← Back

Kuwfi

kuwfi

1 CVE • 2 products

Products (2)

Click to collapse
Toggle
Ac900 Firmware
ac900_firmware
1 CVE
Ac900
ac900
0 CVEs

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-68706
1Kuwfi
1Ac900 Firmware
Jun 17, 2026
Dec 29, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf() to copy the user-supplied pincode parameter...Show more
A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf() to copy the user-supplied pincode parameter into a fixed 132-byte stack buffer with no bounds checks. This allows an attacker to corrupt adjacent stack memory, crash the web server, and (under certain conditions) may enable arbitrary code execution.Show less