Vulnerability Description
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and download a full configuration archive. This archive contains sensitive files such as /etc/shadow, enabling credential recovery and potential full compromise of the device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kaysus | Ks-Wr3600 Firmware | 1.0.5.9.1 |
| Kaysus | Ks-Wr3600 | - |
Related Weaknesses (CWE)
References
- https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68719.txtThird Party Advisory
- https://github.com/actuator/cve/tree/main/KAYSUSExploit
- https://www.kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.htmlProduct
FAQ
What is CVE-2025-68719?
CVE-2025-68719 is a vulnerability with a CVSS score of 8.8 (HIGH). KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and ...
How severe is CVE-2025-68719?
CVE-2025-68719 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-68719?
Check the references section above for vendor advisories and patch information. Affected products include: Kaysus Ks-Wr3600 Firmware, Kaysus Ks-Wr3600.