CVE-2025-43986

An issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices

Critical Ā· published August 13, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

🚨 Your KuWFi GC111 devices are like open books on the internet—TELNET is enabled by default and anyone can peek inside! šŸ”„ Imagine leaving your front door wide open with a welcome mat that says 'come on in!' This vulnerability exposes your devices to anyone online, just like a thief strolling into an unguarded house. šŸ  If malicious actors find this vulnerability, they could access your device without any authentication—reading and even modifying your settings at will! This could lead to unauthorized control over your network, resulting in devastating consequences like data breaches or service disruptions.

Put simply

Imagine leaving your front door wide open with a welcome mat that says 'come on in!' This vulnerability exposes your devices to anyone online, just like a thief strolling into an unguarded house. šŸ  The vulnerability stems from the TELNET service being enabled by default on KuWFi GC111 devices, allowing unauthenticated remote access over the WAN interface. Attackers can easily exploit this oversight to gain control of the device.

What to do

If malicious actors find this vulnerability, they could access your device without any authentication—reading and even modifying your settings at will! This could lead to unauthorized control over your network, resulting in devastating consequences like data breaches or service disruptions. Immediately disable the TELNET service or configure it to require authentication. Ensure your device is updated to the latest firmware version to mitigate the risk of unauthorized access. Regularly review network settings to ensure security best practices are followed. You've got this! Take these steps to protect your network and keep those digital intruders at bay! šŸ›”ļø

The record
Technical detail
CVSS v3.1
9.8 Ā· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00509 Ā· 42.6th percentile
Published
2025-08-13T00:00Z
EPSS history
Timeline
  • 13 AUG 00:00Z
    An issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices
    cvelistv5