Ks-wr3600 Firmware vulnerabilities
3 known vulnerabilities in Ks-wr3600 Firmware from Kaysus. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Ks-wr3600 Firmware: Exposure of Sensitive Information to an Unauthorized Actor
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and download a full configuration archive. This archive contains
- 9.4 Critical severity
Ks-wr3600 Firmware: Improper Authentication
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets
- 8.4 High severity
Ks-wr3600 Firmware: Improper Access Control
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allow