by Kastro
Paper/Archive/CVE-2025-68717

CVE-2025-68717

mitre — KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation.

EPSS 0.6%CVSS 9.4
critical.is priorityof 100
38
CVSS 9.4 (ADP)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 46.9.469 × 209.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user's active session to retrieve sensitive configuration data or execute privileged actions without authentication.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refkaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.htmlrefgithub.com/actuator/cve/tree/main/KAYSUSrefgithub.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68717.txt