CVE-2025-68717

{
  "id": "CVE-2025-68717",
  "sourceIdentifier": "[email protected]",
  "published": "2026-01-08T21:15:43.353",
  "lastModified": "2026-11-04T22:10:00.210",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user's active session to retrieve sensitive configuration data or execute privileged actions without authentication."
    },
    {
      "lang": "es",
      "value": "Los routers KAYSUS KS-WR3600 con firmware 1.0.5.9.1 permiten la omisión de autenticación durante la validación de sesión. Si algún usuario ha iniciado sesión, puntos finales como /cgi-bin/system-tool aceptan solicitudes no autenticadas con valores de sesión vacíos o inválidos. Esta falla de diseño permite a los atacantes aprovecharse de la sesión activa de otro usuario para recuperar datos de configuración sensibles o ejecutar acciones privilegiadas sin autenticación."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
          "baseScore": 9.4,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-01-08T20:37:33.823004Z",
          "id": "CVE-2025-68717",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:kaysus:ks-wr3600_firmware:1.0.5.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A325820-C480-454D-9A4F-AC61604C5566"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:kaysus:ks-wr3600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2859021-9B27-47E2-9802-AE453C915F8D"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68717.txt",
      "source": "[email protected]",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://github.com/actuator/cve/tree/main/KAYSUS",
      "source": "[email protected]",
      "tags": [
        "Exploit"
      ]
    },
    {
      "url": "https://www.kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.html",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}