High severity8.8NVD Advisory· Published Aug 14, 2025· Updated Apr 15, 2026
CVE-2024-53945
CVE-2024-53945
Description
The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSetting and /goform/atCmd. An authenticated attacker can execute arbitrary OS commands with root privileges via shell metacharacters in parameters such as pincode and cmds. Exploitation can lead to full system compromise, including enabling remote access (e.g., enabling telnet).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: = 1.0.13
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.