These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2025-68718 is a vulnerability in KAYSUS KS-WR1200 routers with firmware 107, exposing SSH and TELNET services on the LAN interface with hardcoded root credentials (root:12345678). This allows any LAN-adjacent attacker to trivially log in with root privileges. The administrator cannot disable these services or change the hardcoded password. The vulnerability has a medium severity and requires immediate [truncated]
CVE-2025-68717 is a critical vulnerability in KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1, allowing authentication bypass during session validation. Attackers can piggyback on another user's active session to retrieve sensitive configuration data or execute privileged actions without authentication. This vulnerability has a CVSS score of 9.4 and is considered CRITICAL. The CVE record was published on [truncated]
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 have SSH enabled by default on the LAN interface with a root account and no password. This allows adjacent attackers to gain root shell access and execute arbitrary commands with full privileges, posing a high risk to LAN administrators and security teams responsible for these routers. They should verify and mitigate SSH exposure to prevent unauthorized acc [truncated]