CVE-2025-68717

EUVD-2026-1451
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user's active session to retrieve sensitive configuration data or execute privileged actions without authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.4 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CISA-ADPADP
9.4 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Affected Products (NVD)
VendorProductVersion
kaysusks-wr3600_firmware
1.0.5.9.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68717.txt
https://github.com/actuator/cve/tree/main/KAYSUS
https://www.kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.html