CVE-2024-53946

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its web management interface. This vulnerability allows an attacker to trick an authenticated admin user into performing unauthorized actions, such as exploiting a command injection vulnerability in /goform/formMultiApnSetting. Successful exploitation can also lead to unauthorized configuration changes.

Published 2025-08-14. Last modified 2026-06-17.