DEFCON-33

Overview

Materials and references for my DEF CON 33 talk on exploiting vulnerabilities in Tuoshi and Kuwfi 5G & LTE Routers.

Covers CVE discoveries, exploitation demos, and lessons learned from vendor analysis.

---

Agenda

1. Whoami
2. Related Work
3. Tuoshi Devices
4. Kuwfi Devices
5. Conclusions

---

Highlights

• Previous Talk: DEF CON 27 – Reverse Engineering 4G Hotspots

• References:

  • Bootloader Unlock CVE-2022-38694
  • @sengkyaut Articles

---

Devices

Tuoshi (Dionlink): NR500-EA, LT15D, LT21B

Kuwfi: GC111, AC900, CPF908, 5G01-X55