CVE-2025-68716

{
  "id": "CVE-2025-68716",
  "sourceIdentifier": "[email protected]",
  "published": "2026-01-08T21:15:43.187",
  "lastModified": "2026-11-04T22:10:00.210",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to trivially gain root shell access and execute arbitrary commands with full privileges."
    },
    {
      "lang": "es",
      "value": "Los routers KAYSUS KS-WR3600 con el firmware 1.0.5.9.1 habilitan el servicio SSH por defecto en la interfaz LAN. La cuenta root está configurada sin contraseña, y los administradores no pueden deshabilitar SSH ni forzar la autenticación a través de la CLI o la GUI web. Esto permite a cualquier atacante adyacente a la LAN obtener acceso trivialmente a un shell root y ejecutar comandos arbitrarios con privilegios completos."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.4,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-01-08T20:51:30.601203Z",
          "id": "CVE-2025-68716",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        },
        {
          "lang": "en",
          "value": "CWE-306"
        },
        {
          "lang": "en",
          "value": "CWE-521"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:kaysus:ks-wr3600_firmware:1.0.5.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A325820-C480-454D-9A4F-AC61604C5566"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:kaysus:ks-wr3600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2859021-9B27-47E2-9802-AE453C915F8D"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68716.txt",
      "source": "[email protected]",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://github.com/actuator/cve/tree/main/KAYSUS",
      "source": "[email protected]",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.html",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}