CVE-2024-53946
BaseFortify
Publication date: 2025-08-14
Last updated on: 2025-08-15
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| kuwfi | 4g_lte_ac900_router | 1.0.13 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The KuWFi 4G LTE AC900 router version 1.0.13 has a Cross-Site Request Forgery (CSRF) vulnerability in its web management interface. This means an attacker can trick an authenticated admin user into unknowingly performing unauthorized actions, such as exploiting a command injection vulnerability in a specific router function (/goform/formMultiApnSetting).
How can this vulnerability impact me? :
This vulnerability can allow an attacker to make unauthorized configuration changes to the router by exploiting the admin user's authenticated session. This could lead to compromised router settings, potential network security breaches, and unauthorized control over the device.