CVE-2025-43984

An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software Version: GC111-GL-LM321_V3.0_20191211). They are vulnerable to unauthenticated /goform/goform_set_cmd_process requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary OS commands with root privileges.

• CWE-78

• https://drive.proton.me/urls/1NRPNBE678#lFyUYIRIBZO5
• https://github.com/actuator/cve/blob/main/Kuwfi/CVE-2025-43984.txt
• https://github.com/actuator/cve/tree/main/kuwfi
• https://www.kuwfi.com/products/300mbps-industrial-router-cat4-4g-cpe-router-extender-strong-wifi-signal-suport-32wifi-users-with-sim-card-slot-95

Published

Aug 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43977The com.skt.prod.dialer application through 12.5.0 for Andro…5.5
• CVE-2025-43978Jointelli 5G CPE 21H01 firmware JY_21H01_A3_v1.36 devices al…7.4
• CVE-2025-43979An issue was discovered on FIRSTNUM JC21A-04 devices through…7.4
• CVE-2025-43980An issue was discovered on FIRSTNUM JC21A-04 devices through…6.5
• CVE-2025-43982Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 d…9.8
• CVE-2025-43983KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple u…9.1
• CVE-2025-43986An issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_2…9.8
• CVE-2025-43988KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthentica…7.5
• CVE-2025-43989The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi…6.5
• CVE-2025-43990Dell Command Monitor (DCM), versions prior to 10.12.3.28, co…7.8
• CVE-2025-43991SupportAssist for Home PCs versions 4.8.2 and prior and Supp…7.1
• CVE-2025-43992Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectSca…5.6