Vulnerability Description
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to trivially gain root shell access and execute arbitrary commands with full privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kaysus | Ks-Wr3600 Firmware | 1.0.5.9.1 |
| Kaysus | Ks-Wr3600 | - |
Related Weaknesses (CWE)
References
- https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68716.txtThird Party Advisory
- https://github.com/actuator/cve/tree/main/KAYSUSThird Party Advisory
- https://www.kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.htmlProduct
FAQ
What is CVE-2025-68716?
CVE-2025-68716 is a vulnerability with a CVSS score of 8.4 (HIGH). KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH ...
How severe is CVE-2025-68716?
CVE-2025-68716 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-68716?
Check the references section above for vendor advisories and patch information. Affected products include: Kaysus Ks-Wr3600 Firmware, Kaysus Ks-Wr3600.