{"id":64184,"date":"2025-08-20T05:02:29","date_gmt":"2025-08-20T05:02:29","guid":{"rendered":""},"modified":"2025-09-03T19:04:33","modified_gmt":"2025-09-04T01:04:33","slug":"cve-2025-43986-unauthenticated-telnet-service-vulnerability-in-kuwfi-gc111-devices","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-43986-unauthenticated-telnet-service-vulnerability-in-kuwfi-gc111-devices\/","title":{"rendered":"CVE-2025-43986: Unauthenticated Telnet Service Vulnerability in KuWFi GC111 Devices<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

In this post, we will examine a critical vulnerability, CVE-2025-43986, discovered in the KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices. This vulnerability is particularly alarming due to its potential for system compromise or data leakage. KuWFi GC111 devices, used worldwide, have the TELNET service enabled by default and exposed over the WAN interface without authentication, posing a significant risk to users’ data and system<\/a> security. It is crucial to address this issue promptly to prevent potential attacks and protect your systems<\/a> and data.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-43986
\nSeverity: Critical (CVSS 9.8)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise or data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n