CVE-2025-44039

Severity: medium (CVSS 5.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-05-13 · updated 2026-06-17
Weakness: CWE-306

Description

CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console. This vulnerability allows local attackers to connect to the UART port via a serial connection, read all boot sequence, and revealing internal system details and sensitive information without any authentication.

Affected products

Cpplusworld Cp-Xr-De21-S Firmware: 1.031.022

References

https://github.com/Yashodhanvivek/CP-XR-DE21-S--4G-Router-Vulnerabilities/blob/main/input.md

Get alerted when CVE-2025-44039 or the next vulnerability affects your stack